Lucene search

K
osvGoogleOSV:CVE-2016-10517
HistoryOct 24, 2017 - 6:29 p.m.

CVE-2016-10517

2017-10-2418:29:00
Google
osv.dev
7

AI Score

7.1

Confidence

Low

EPSS

0.002

Percentile

54.7%

networking.c in Redis before 3.2.7 allows “Cross Protocol Scripting” because it lacks a check for POST and Host: strings, which are not valid in the Redis protocol (but commonly occur when an attack triggers an HTTP request to the Redis TCP port).

AI Score

7.1

Confidence

Low

EPSS

0.002

Percentile

54.7%