Lucene search
+L

1 matches found

Spring Security Advisories
Spring Security Advisories
added 2026/03/26 12:0 a.m.12 views

RediSearch Query via Unescaped TAG Filter Values in RedisVectorStore

In RedisFilterExpressionConverter of spring-ai-redis-store , when a user-controlled string is passed as a filter value for a TAG field, stringValue inserts the value directly into the @field:VALUE RediSearch TAG block without escaping characters...

7.5CVSS5.8AI score0.0025EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder