redash-vulnerable 🐛

A Dockerized Redash instance that is vulnerable to CVE-2021-21239 as written about by Calif.

Usage 💻

Starting the server (preserving data)

script/server

This will start the Redash server using Docker Compose in detached mode, preserving any existing data. The server will be available at http://localhost:8080.

Starting fresh (destroying all data)

script/server --destroy

This will destroy all existing containers, volumes, and data directories, then rebuild everything from scratch. Use this when you want to start completely fresh.

Note: The --destroy flag will permanently delete all your Redash data, including dashboards, queries, users, and database content.