Exploit for Missing Authorization in Redis

githubexploit · 2022-03-16

Description

Redis authorization exploit CVE-2022-0543

Affected Redis versions

Redis All versions

All known vulnerabilities by product

Astra Linux Debian-Specific Redis Server Linuxmint Redis Ubuntu

CVSS 10.0 for CVE-2022-0543

10.0

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:CHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

86%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

99.3%higher than 99.9% of all CVEs

Updated 2026-08-02

Exploit Details

Modified:2025-06-17 14:53

Last Seen:2025-08-31 21:14

Reporter:aodsec

Written in:Python

Last commit:2024-01-16

Tags

redisauthorizationexploit

Other exploits for CVE-2022-0543

Redis-RCE-x-HTB

2026-08-06 xC0D3F4TH3RGITHUB

exploit-library

2026-07-14 shunfeng8421GITHUB

cve-poc-collection

2026-07-07 Baiye-2004GITHUB

Exploit for Missing Authorization in Redis

2022-09-01 JacobEbbenGITHUB

Exploit for Missing Authorization in Redis

2022-07-06 z92gGITHUB

Redis Lua Sandbox Escape Exploit

2022-04-27 Reginaldo SilvaZDTRuby

Redis Lua Sandbox Escape

2022-04-27 Reginaldo Silva, jbaines-r7, metasploit.comPACKETSTORMRuby

Exploit for Missing Authorization in Redis

2022-03-16 0x7eTeamGITHUB

Exploit Code

README7 lines

## https://sploitus.com/exploit?id=423F06A3-70C4-58A1-8A3E-74C89561449D
# CVE-2022-0543  
CVE-2022-0543_RCE: Redis Lua sandbox bypass, command execution  
## Usage  

python3 CVE-2022-0543.py  
![Example](https://github.com/aodsec/CVE-2022-0543/blob/main/1.jpg)