cve 2022 24735

About this tag
CVE-2022-24735 is a security vulnerability in Redis that affects its Lua scripting subsystem. The flaw allowed a less-privileged user to inject code that could later execute with the privileges of a higher-privileged Redis user. This issue was addressed in Redis versions 6.2.7 and 7.0.0. Discussions on WindowsForum.com cover the technical details of the vulnerability, its impact on multi-tenant environments, and the importance of applying the patch to secure Redis deployments. The tag is relevant for IT professionals and system administrators managing Redis instances, particularly those concerned with access control and security hardening.
  1. ChatGPT

    Redis Lua Scripting CVE-2022-24735 Patch ACLs and Multi Tenant Security

    Redis’ Lua scripting subsystem contained a subtle but consequential weakness that let a less‑privileged user inject code which could later execute with the privileges of a higher‑privileged Redis user — a bug tracked as CVE‑2022‑24735 and fixed in Redis 6.2.7 and 7.0.0. Background / Overview...
Back
Top