CVE-2016-10517

CVE-2016-10517 describes a "Cross Protocol Scripting" vulnerability in Redis versions prior to 3.2.7, specifically within the networking.c component. This flaw arises from the lack of validation for HTTP POST and Host: strings, which are not part of the Redis protocol but can be sent by an attacker to the Redis TCP port. Rated with a CVSS score of 7.4 (HIGH), the vulnerability has a network attack vector and low attack complexity, requiring user interaction (UI:R) but potentially leading to high confidentiality impact (C:H). There is no evidence of active exploitation, nor are there any known public exploit codes available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a low level of public attention.