CVE-2023-28425

Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10.

• CWE-77
• CWE-617

• https://github.com/redis/redis/commit/48e0d4788434833b47892fe9f3d91be7687f25c9Patch
• https://github.com/redis/redis/releases/tag/7.0.10Release Notes
• https://github.com/redis/redis/security/advisories/GHSA-mvmm-4vq6-vw8cVendor Advisory
• https://security.netapp.com/advisory/ntap-20230413-0005/
• https://github.com/redis/redis/commit/48e0d4788434833b47892fe9f3d91be7687f25c9Patch
• https://github.com/redis/redis/releases/tag/7.0.10Release Notes
• https://github.com/redis/redis/security/advisories/GHSA-mvmm-4vq6-vw8cVendor Advisory
• https://security.netapp.com/advisory/ntap-20230413-0005/

Published

Mar 20, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-2842The WP Inventory Manager WordPress plugin before 2.1.0.14 do…8.1
• CVE-2023-28420Cross-Site Request Forgery (CSRF) vulnerability in Leo Casei…8.8
• CVE-2023-28421Exposure of Sensitive Information to an Unauthorized Actor v…7.5
• CVE-2023-28422Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerabili…4.8
• CVE-2023-28423Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerabili…4.8
• CVE-2023-28424Soko if the code that powers packages.gentoo.org. Prior to v…9.8
• CVE-2023-28426Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2023-28427matrix-js-sdk is a Matrix messaging protocol Client-Server S…8.2
• CVE-2023-28428PDFio is a C library for reading and writing PDF files. In v…3.3
• CVE-2023-28429Pimcore is an open source data and experience management pla…6.1
• CVE-2023-2843The MultiParcels Shipping For WooCommerce WordPress plugin b…8.8
• CVE-2023-28430OneSignal is an email, sms, push notification, and in-app me…8.1