Security Advisory

CVE-2020-12725

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-06-11 18:50:28

Last updated 2024-08-04 12:04:22

Assigner mitre

State PUBLISHED

Description

Havoc Research discovered an authenticated Server-Side Request Forgery (SSRF) via the "JSON" data source of Redash open-source 8.0.0 and prior. Possibly, other connectors are affected. The SSRF is potent and provides a lot of flexibility in terms of being able to craft HTTP requests e.g., by adding headers, selecting any HTTP verb, etc.

← Browse all CVEs View on cve.org ↗