Skip to content
Threat Feed

Product

Redis

5 briefs RSS
high advisory

Out-of-Bounds Read Vulnerability in Redis Cluster Bus

A vulnerability in the Redis cluster bus packet parser allows remote attackers to trigger an out-of-bounds read via crafted PING, PONG, or MEET packets, resulting in potential information disclosure or denial of service.

Redis vulnerability memory-safety denial-of-service
1c
medium advisory

Redis Vulnerability Enables Denial of Service and Information Disclosure

A vulnerability in Redis allows an attacker located in an adjacent network to trigger a Denial of Service condition and perform unauthorized information disclosure.

Redis
1t 1c
medium advisory

Redis Authenticated Remote Code Execution Vulnerability

A vulnerability in Redis allows a remote, authenticated attacker to achieve arbitrary code execution on the target server.

Redis vulnerability rce database
1t
high advisory

Open WebUI Cross-Instance Cache Poisoning Vulnerability

Open WebUI versions up to 0.8.12 are vulnerable to cross-instance cache poisoning when multiple instances share a Redis backend, allowing an attacker with admin access on one instance to overwrite cache values used by other instances, leading to data exfiltration and prompt injection attacks.

open-webui +1 cache-poisoning redis vulnerability
2r 2t
critical advisory

Redis Vulnerabilities Allow Local Code Execution

A local attacker can exploit multiple unspecified vulnerabilities in Redis to achieve arbitrary code execution on the host system.

Redis code-execution local-privilege-escalation
2r 1t