알려진 취약점
| CVE | 제목 | 영향 버전 | CVSS | 악용 | EPSS | 공개일 |
|---|---|---|---|---|---|---|
| CVE-2026-77371 | Redash: DuckDB query runner allows arbitrary file read/write via unrestricted external access | * | 9.3 | — | 2026-10-15 | |
| CVE-2026-76083 | Redash: JSON data source query URL can bypass base URL restriction | * | 4.9 | — | 2026-10-15 | |
| CVE-2026-42093 | Redash: SQL Injection via Query Results parameterized query substitution | * | 8.7 | — | 2026-10-15 | |
| CVE-2026-33213 | Redash: Open redirect vulnerability in post-login redirect handling | * | 6.1 | — | 2026-07-15 | |
| CVE-2021-43780 | Server-Side Request Forgery (SSRF) in Redash | * | 6.8 | — | 2021-11-24 | |
| CVE-2021-41192 | Insecure default configuration | * | 8.1 | — | 2021-11-24 | |
| CVE-2021-43777 | Vulnerability in Redash OAuth2 flows due to misuse of state field (should be a nonce) | * | 6.8 | — | 2021-11-24 | |
| CVE-2020-36144 | Redash 8.0.0 is affected by LDAP Injection. There is an information leak through the crafting of special queri... | * | — | — | 2021-03-19 | |
| CVE-2020-12725 | Havoc Research discovered an authenticated Server-Side Request Forgery (SSRF) via the "JSON" data source of Re... | * | — | — | 2020-06-12 |
내 서버의 버전을 직접 추적하세요
InfraGuard 는 모든 서버에 설치된 소프트웨어 버전을 수집하고, 알려진 취약점이 있는 버전을 알려 줍니다. 자체 호스팅이라 데이터가 내 네트워크를 벗어나지 않습니다.
데이터: CVE List(CVE® Program), NVD, CISA KEV, FIRST EPSS(EPSS 는 https://www.first.org/epss 참고), endoflife.date. 소프트웨어 목록: awesome-selfhosted(CC BY-SA 3.0).