Yangbodong22011

**Name of the Vulnerable Software and Affected Versions** Redis versions 7.0 through 7.0.12 Redis versions 7.2 through 7.2.0 **Description** The issue is related to insecure privilege management in Redis, an in-memory database that persists on disk. It does not correctly identify keys accessed by the `SORT RO` command, potentially granting users access to keys not explicitly authorized by the ACL configuration. **Recommendations** For Redis versions 7.0 through 7.0.12, upgrade to version 7.0.13. For Redis versions 7.2 through 7.2.0, upgrade to version 7.2.1. As a temporary workaround, consider restricting access to the `SORT RO` command until a patch is available.