onyx

onyx --cves cve-2023-28425

CVE-2023-28425

score
<0.1
cvss
5.5
epss
58.5%
published
2023-03-20
kev added
—
first seen

Redis versions 7.0.8 to before 7.0.10 contain a runtime assertion caused by the MSETNX command when used by authenticated users, letting attackers cause denial of service by terminating the server, exploit requires authenticated access.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2023-03-20 — PublishedP2026-10-21 — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 54.7%2026-09-23: epss 54.7%2026-09-24: epss 54.7%2026-09-25: epss 54.7%2026-09-26: epss 54.7%2026-09-27: epss 54.7%2026-09-28: epss 54.7%2026-09-29: epss 54.7%2026-09-30: epss 54.7%2026-10-01: epss 54.7%2026-10-02: epss 54.7%2026-10-03: epss 54.7%2026-10-04: epss 54.7%2026-10-05: epss 54.7%2026-10-06: epss 54.7%2026-10-07: epss 54.7%2026-10-08: epss 54.7%2026-10-09: epss 54.7%2026-10-10: epss 54.7%2026-10-11: epss 54.7%2026-10-12: epss 54.7%2026-10-13: epss 54.7%2026-10-14: epss 58.5%2026-10-15: epss 58.5%2026-10-16: epss 58.5%2026-10-18: epss 58.5%2026-10-19: epss 58.5%2026-10-20: epss 58.5%2026-10-21: epss 58.5%58.5%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx

Weaknesses

CWE-77 CWE-617

References 4