Redash Installer Exposure
Redash is susceptible to the Installation page exposure due to misconfiguration.
redashPoC 已收录
CVSS—
共找到 2 条公开漏洞记录
Redash is susceptible to the Installation page exposure due to misconfiguration.
Redash Setup Configuration is vulnerable to default secrets disclosure (Insecure Default Initialization of Resource). If an admin sets up Redash versions <=10.0 and prior without explicitly specifying the `REDASH_COOKIE_SECRET` or `REDASH_SECRET_KEY` environment variables, a default value is used for both that is the same across all installations. In such cases, the instance is vulnerable to attackers being able to forge sessions using the known default value.