| Package | Affected versions | Patched versions |
|---|---|---|
| redis | < 3.2.7 | 3.2.7 |
networking.c in Redis before 3.2.7 allows "Cross Protocol Scripting" because it lacks a check for POST and Host: strings, which are not valid in the Redis protocol (but commonly occur when an attack triggers an HTTP request to the Redis TCP port).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free