Critical 9.9 Redis vulnerability enables remote code execution
www.scworld.com
Crafted Lua scripts could be used to trigger a use-after-free flaw in affected instances.
  • The Bard in GreenAEnglish
    1•28 days ago

    I’m gonna upgrade the redis instances I’m responsible for, but it looks like this only effects instances that are internet exposed. All my redis instances run on the same machine as the front end (I use them as a local cache, with $SQL as a remote source of ultimate truth).