Dradis vulnerabilities
We track 1 vulnerability in Dradis products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 25, 2026.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest Dradis vulnerabilities
- 7.1 High severity
dradis-ce: Server-Side Request Forgery
In Dradis Community Edition, the ProvidersController and AgentsController gate their admin_required before_action on `defined?(Dradis::Pro)`, a constant that is never defined in CE, so the authorization check is never applied. As a result, any authenticated (n