CVE-2020-12725

Havoc Research discovered an authenticated Server-Side Request Forgery (SSRF) via the "JSON" data source of Redash open-source 8.0.0 and prior. Possibly, other connectors are affected. The SSRF is potent and provides a lot of flexibility in terms of being able to craft HTTP requests e.g., by adding headers, selecting any HTTP verb, etc.

• CWE-918

• https://blog.redash.ioVendor Advisory
• https://github.com/getredash/redash/commits/masterPatch, Vendor Advisory
• https://github.com/getredash/redash/issues/4869Exploit, Vendor Advisory
• https://blog.redash.ioVendor Advisory
• https://github.com/getredash/redash/commits/masterPatch, Vendor Advisory
• https://github.com/getredash/redash/issues/4869Exploit, Vendor Advisory

Published

Jun 11, 2020

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-12717The COVIDSafe (Australia) app 1.0 and 1.1 for iOS allows a r…6.5
• CVE-2020-12718In administration/comments.php in PHP-Fusion 9.03.50, an aut…5.4
• CVE-2020-12719XXE during an EventPublisher update can occur in Management …7.2
• CVE-2020-1272An elevation of privilege vulnerability exists in the Window…7.8
• CVE-2020-12720vBulletin before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and 5.6.1 …9.8
• CVE-2020-12723regcomp.c in Perl before 5.30.3 allows a buffer overflow via…7.5
• CVE-2020-12729MagicMotion Flamingo 2 has a lack of access control for read…4.6
• CVE-2020-1273An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-12730MagicMotion Flamingo 2 lacks BLE encryption, enabling data s…5.3
• CVE-2020-12731The MagicMotion Flamingo 2 application for Android stores da…7.5
• CVE-2020-12732DEPSTECH WiFi Digital Microscope 3 has a default SSID of Jet…6.5
• CVE-2020-12733Certain Shenzhen PENGLIXIN components on DEPSTECH WiFi Digit…7.5