Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
contribsys sidekiq vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-46950
Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote malicious user to obtain sensitive information via a crafted URL to the filter functions.
NA
CVE-2023-46951
Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote malicious user to obtain sensitive information via a crafted payload to the uniquejobs function.
NA
CVE-2023-26141
Versions of the package sidekiq prior to 7.1.3 are vulnerable to Denial of Service (DoS) due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests.
Contribsys Sidekiq
NA
CVE-2023-1892
Cross-site Scripting (XSS) - Reflected in GitHub repository sidekiq/sidekiq before 7.0.8.
Contribsys Sidekiq
5
CVSSv2
CVE-2022-23837
In api.rb in Sidekiq prior to 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph. This overloads the system, affecting the Web UI, and makes it unavailable to users.
Contribsys Sidekiq
Debian Debian Linux 9.0
4.3
CVSSv2
CVE-2021-30151
Sidekiq up to and including 5.1.3 and 6.x up to and including 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used.
Contribsys Sidekiq
Debian Debian Linux 9.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463
CVE-2024-29895
inject
CVE-2023-52689
CVE-2024-5049
CVE-2024-5051
privilege escalation
physical
CVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started