You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
cve 2022 24735
About this tag
CVE-2022-24735 is a security vulnerability in Redis that affects its Lua scripting subsystem. The flaw allowed a less-privileged user to inject code that could later execute with the privileges of a higher-privileged Redis user. This issue was addressed in Redis versions 6.2.7 and 7.0.0. Discussions on WindowsForum.com cover the technical details of the vulnerability, its impact on multi-tenant environments, and the importance of applying the patch to secure Redis deployments. The tag is relevant for IT professionals and system administrators managing Redis instances, particularly those concerned with access control and security hardening.
Redis’ Lua scripting subsystem contained a subtle but consequential weakness that let a less‑privileged user inject code which could later execute with the privileges of a higher‑privileged Redis user — a bug tracked as CVE‑2022‑24735 and fixed in Redis 6.2.7 and 7.0.0. Background / Overview...