https://github.com/grantbirki/redash-vulnerable
A Dockerized Redash instance that is vulnerable to CVE-2021-21239
https://github.com/grantbirki/redash-vulnerable
security
Last synced: 11 months ago
JSON representation
A Dockerized Redash instance that is vulnerable to CVE-2021-21239
- Host: GitHub
- URL: https://github.com/grantbirki/redash-vulnerable
- Owner: GrantBirki
- Created: 2025-08-03T03:36:47.000Z (12 months ago)
- Default Branch: main
- Last Pushed: 2025-08-04T04:06:06.000Z (12 months ago)
- Last Synced: 2025-08-19T07:10:00.968Z (11 months ago)
- Topics: security
- Language: Python
- Homepage:
- Size: 13.7 KB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Codeowners: .github/CODEOWNERS
Awesome Lists containing this project
README
# redash-vulnerable 🐛
A Dockerized Redash instance that is vulnerable to [`CVE-2021-21239`](https://nvd.nist.gov/vuln/detail/CVE-2021-21239) as written about by [Calif](https://blog.calif.io/p/redash-saml-authentication-bypass).
## Usage 💻
### Starting the server (preserving data)
```bash
script/server
```
This will start the Redash server using Docker Compose in detached mode, preserving any existing data. The server will be available at [`http://localhost:8080`](http://localhost:8080/setup).
### Starting fresh (destroying all data)
```bash
script/server --destroy
```
This will destroy all existing containers, volumes, and data directories, then rebuild everything from scratch. Use this when you want to start completely fresh.
**Note:** The `--destroy` flag will permanently delete all your Redash data, including dashboards, queries, users, and database content.