Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:predis:predis:3.2.0:*:*:*:*:*:*:*

1 brief RSS
critical advisory

Remote Command Injection and DoS in Predis via CRLF Smuggling

Predis versions 3.0.0-RC1 through 3.2.0 are vulnerable to CRLF smuggling in pipeline operations on aggregate connections, enabling remote command injection on cluster configurations or denial-of-service on replication setups.

Predis redis injection php
1t 1c