id: redash-installer info: name: Redash Installer Exposure author: DhiyaneshDk severity: high description: Redash is susceptible to the Installation page exposure due to misconfiguration. classification: cpe: cpe:2.3:a:redash:redash:*:*:*:*:*:*:*:* metadata: verified: true max-request: 1 vendor: redash product: redash shodan-query: html:"Redash Initial Setup" tags: misconfig,redash,install http: - method: GET path: - '{{BaseURL}}/setup' matchers-condition: and matchers: - type: word part: body words: - 'Redash Initial Setup' - 'Admin User' condition: and - type: word part: header words: - "text/html" - type: status status: - 200 # digest: 490a004630440220099d59b3b173edfcbdfcea7225529815b91a5b2b83d77ee9c6ca68d88ffc735602203c17083b08879380deaa9d043daa3bee31ed4b4ceb4dea2b11e931d2bde6450b:922c64590222798bb761d5b6d8e72950