← Back to browse · API

CVE-2023-28425

Severity
MEDIUM
CVSS
5.5
EPSS
0.54978
Risk score
41.24
CISA KEV
No
PoC
No
Published
2023-03-20
Modified
2025-02-25
First seen
2026-08-07
Aliases
EUVD-2023-32121
Products
Redis:Redis 7.0.8, < 7.0.10
Sources
euvd EUVD-2023-32121

Description

Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10.

References