1 matches found
RediSearch Injection
Spring AI is vulnerable to RediSearch Injection. The vulnerability is due to RedisChatMemoryRepository.findByMetadata using unsanitized metadata values in RediSearch queries, allowing an attacker to inject RediSearch syntax and retrieve chat messages across conversations...
4.3CVSS6AI score0.00301EPSS
SaveExploits0References1Affected Software1
20