CyberSecBulletin

Redisson vulnerabilities

We track 1 vulnerability in Redisson products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 4, 2023.

1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score

Latest Redisson vulnerabilities

  • 8.8 High severity

    redisson: Deserialization of Untrusted Data

    CVE-2023-42809RedissonEPSS 1.1%

    Redisson is a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some of the messages received from the Redis server contain Java objects that the client deserializes without further validation. Attackers that manage to trick clients int