CVE-2020-12725

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

Havoc Research discovered an authenticated Server-Side Request Forgery (SSRF) via the "JSON" data source of Redash open-source 8.0.0 and prior. Possibly, other connectors are affected. The SSRF is potent and provides a lot of flexibility in terms of being able to craft HTTP requests e.g., by adding headers, selecting any HTTP verb, etc.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-918

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://blog.redash.ioVendor Advisory
https://github.com/getredash/redash/commits/masterPatch, Vendor Advisory
https://github.com/getredash/redash/issues/4869Exploit, Vendor Advisory
https://blog.redash.ioVendor Advisory
https://github.com/getredash/redash/commits/masterPatch, Vendor Advisory
https://github.com/getredash/redash/issues/4869Exploit, Vendor Advisory

Timeline

Published: Jun 11, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-127294.6MagicMotion Flamingo 2 has a lack of access control for reading from device descriptors.CVE-2020-12737.8An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva CVE-2020-127305.3MagicMotion Flamingo 2 lacks BLE encryption, enabling data sniffing and packet forgery.CVE-2020-127317.5The MagicMotion Flamingo 2 application for Android stores data on an sdcard under com.vt.magicmotion/files/Pictures, whence it can be read b CVE-2020-127326.5DEPSTECH WiFi Digital Microscope 3 has a default SSID of Jetion_xxxxxxxx with a password of 12345678.CVE-2020-127337.5Certain Shenzhen PENGLIXIN components on DEPSTECH WiFi Digital Microscope 3, as used by Shekar Endoscope, allow a TELNET connection with the CVE-2020-127348.1DEPSTECH WiFi Digital Microscope 3 allows remote attackers to change the SSID and password, and demand a ransom payment from the rightful de CVE-2020-127359.8reset.php in DomainMOD 4.13.0 uses insufficient entropy for password reset requests, leading to account takeover.CVE-2020-127367.2Code42 environments with on-premises server versions 7.0.4 and earlier allow for possible remote code execution. When an administrator creat CVE-2020-127376.5An issue was discovered in Maxum Rumpus before 8.2.12 on macOS. Authenticated users can perform a path traversal using double escaped charac CVE-2020-127395.3A denial-of-service vulnerability in the Fanuc i Series CNC (0i-MD and 0i Mate-MD) could allow an unauthenticated, remote attacker to cause CVE-2020-12747.8An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva