CyberRota Analysis
AI-GeneratedRedash versions 5.0.2 to 26.3.0 are vulnerable due to a flaw in the get_next_path() function, which improperly handles multiple leading slashes in user-supplied next parameters. This vulnerability allows attackers to craft malicious login URLs that redirect authenticated users to external sites, potentially leading to phishing attacks. Organizations using affected versions of Redash should prioritize patching this vulnerability to protect their users from potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Redash is a package for data visualization and sharing. From 5.0.2 to 26.3.0, the get_next_path() function in Redash's authentication module stripped the scheme and netloc from user-supplied next parameters but did not normalize multiple leading slashes, allowing a crafted login URL such as /login?next=////evil.com to redirect users to an external attacker-controlled site after authentication.