CVE-2016-10517

score

<0.1

cvss

7.4

epss

2.1%

published

2017-10-24

kev added

—

first seen

2026-10-21

Redis before 3.2.7 contains a cross protocol scripting vulnerability caused by missing checks for POST and Host: strings in networking.c, letting attackers send malicious HTTP requests to Redis TCP port, exploit requires attacker to send crafted HTTP request.