CVE-2016-10517 in Redis
Summary
networking.c in Redis before 3.2.7 allows "Cross Protocol Scripting" because it lacks a check for POST and Host: strings, which are not valid in the Redis protocol (but commonly occur when an attack triggers an HTTP request to the Redis TCP port).
Be aware that VulDB is the high quality source for vulnerability data.