Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
contribsys sidekiq vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-46950
Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote malicious user to obtain sensitive information via a crafted URL to the filter functions.
NA
CVE-2023-46951
Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote malicious user to obtain sensitive information via a crafted payload to the uniquejobs function.
4.9
CVSSv3
CVE-2023-26141
Versions of the package sidekiq prior to 7.1.3 are vulnerable to Denial of Service (DoS) due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests.
Contribsys Sidekiq
9.6
CVSSv3
CVE-2023-1892
Cross-site Scripting (XSS) - Reflected in GitHub repository sidekiq/sidekiq before 7.0.8.
Contribsys Sidekiq
7.5
CVSSv3
CVE-2022-23837
In api.rb in Sidekiq prior to 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph. This overloads the system, affecting the Web UI, and makes it unavailable to users.
Contribsys Sidekiq
Debian Debian Linux 9.0
6.1
CVSSv3
CVE-2021-30151
Sidekiq up to and including 5.1.3 and 6.x up to and including 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used.
Contribsys Sidekiq
Debian Debian Linux 9.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
firmware
CVE-2023-52866
CVE-2024-4367
CVE-2024-1721
CVE-2023-34992
XML injection
CVE-2023-52817
SQL
CVE-2023-52855
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started