Code injection

2023-11-1605:15:00

PRIOn knowledge base

www.prio-n.com

redisgraph v2.12.10

code injection

arbitrary code

denial of service

8.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.3%

JSON

An issue in RedisGraph v.2.12.10 allows an attacker to execute arbitrary code and cause a denial of service via a crafted string in DataBlock_ItemIsDeleted.

CPENameOperatorVersion
redisgrapheq2.12.10

CPE	Name	Operator	Version
	redisgraph	eq	2.12.10

References

github.com/RedisGraph/RedisGraph/issues/3063