Redis · Redis · CVE-2023-41053
**Name of the Vulnerable Software and Affected Versions**
Redis versions 7.0 through 7.0.12
Redis versions 7.2 through 7.2.0
**Description**
The issue is related to insecure privilege management in Redis, an in-memory database that persists on disk. It does not correctly identify keys accessed by the `SORT RO` command, potentially granting users access to keys not explicitly authorized by the ACL configuration.
**Recommendations**
For Redis versions 7.0 through 7.0.12, upgrade to version 7.0.13.
For Redis versions 7.2 through 7.2.0, upgrade to version 7.2.1.
As a temporary workaround, consider restricting access to the `SORT RO` command until a patch is available.