Redis before 2.8.21 and 3.x before 3.0.2 allows remote attackers to execute arbitrary Lua bytecode via the eval command. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
RCE
Redis
Debian
Debian Linux
Redislabs
NVD
GitHub
CVSS 2.0
10.0
EPSS
8.1%