Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
contribsys sidekiq vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-46950
Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote malicious user to obtain sensitive information via a crafted URL to the filter functions.
NA
CVE-2023-46951
Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote malicious user to obtain sensitive information via a crafted payload to the uniquejobs function.
NA
CVE-2023-26141
Versions of the package sidekiq prior to 7.1.3 are vulnerable to Denial of Service (DoS) due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests.
Contribsys Sidekiq
NA
CVE-2023-1892
Cross-site Scripting (XSS) - Reflected in GitHub repository sidekiq/sidekiq before 7.0.8.
Contribsys Sidekiq
445
VMScore
CVE-2022-23837
In api.rb in Sidekiq prior to 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph. This overloads the system, affecting the Web UI, and makes it unavailable to users.
Contribsys Sidekiq
Debian Debian Linux 9.0
384
VMScore
CVE-2021-30151
Sidekiq up to and including 5.1.3 and 6.x up to and including 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used.
Contribsys Sidekiq
Debian Debian Linux 9.0
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypass
CVE-2024-30051
remote
CVE-2024-27954
CVE-2023-51483
CVE-2023-47782
SSRF
CVE-2024-24715
CVE-2023-52424
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started