Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
contribsys sidekiq vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-46951
Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote malicious user to obtain sensitive information via a crafted payload to the uniquejobs function.
NA
CVE-2023-46950
Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote malicious user to obtain sensitive information via a crafted URL to the filter functions.
NA
CVE-2023-26141
Versions of the package sidekiq prior to 7.1.3 are vulnerable to Denial of Service (DoS) due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests.
Contribsys Sidekiq
NA
CVE-2023-1892
Cross-site Scripting (XSS) - Reflected in GitHub repository sidekiq/sidekiq before 7.0.8.
Contribsys Sidekiq
5
CVSSv2
CVE-2022-23837
In api.rb in Sidekiq prior to 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph. This overloads the system, affecting the Web UI, and makes it unavailable to users.
Contribsys Sidekiq
Debian Debian Linux 9.0
4.3
CVSSv2
CVE-2021-30151
Sidekiq up to and including 5.1.3 and 6.x up to and including 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used.
Contribsys Sidekiq
Debian Debian Linux 9.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322
cross-site request forgery
unauthorized
CVE-2024-33925
reflected XSS
CVE-2023-51580
CVE-2023-51579
CVE-2015-2051
CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started