CVE-2023-42809

CVE-2023-42809 is a critical deserialization vulnerability affecting Redisson, a Java Redis client, prior to version 3.22.0. Attackers can exploit this by tricking clients into connecting to a malicious Redis server, which then sends specially crafted Java objects that, upon deserialization, execute arbitrary code on the client's machine. This vulnerability carries a CVSS score of 8.8 (HIGH), indicating a network-based attack with low complexity, requiring user interaction, and leading to high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with 10 mentions, suggesting awareness and potential for future exploitation.