The CVE-2024-31989 vulnerability affects anyone who does not have strict access controls on their Redis instance
Redis
A Linux-based malware family, DreamBus has been quietly evolving, honing its capabilities to exploit vulnerabilities in business applications
CVE-2022-35951 has a CVSS score of 7.0 and is described as a heap overflow in Redis 7.0 XAUTOCLAIM command's COUNT argument.