sidekiq vulnerable to cross-site scripting

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-1892 · ADVISORY
• sidekiq/sidekiq commit 458fdf7 · WEB
• rubysec/ruby-advisory-db · WEB
• sidekiq/sidekiq · PACKAGE
• sidekiq/sidekiq · WEB
• huntr.dev/bounties/e35e5653-c429-4fb8-94a3-cbc123ae4777 · WEB

sidekiq のその他の脆弱性

• CVE-2024-32887中 5.5Sidekiq is simple, efficient background processing for Ruby. Sidekiq is reflected XSS vulnerability. The value of substr parameter is reflec…
• CVE-2023-26141中 4.9Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service (DoS) due to insufficient checks in the dashboard-charts.js…
• CVE-2022-23837高 7.5In api.rb in Sidekiq before 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph. This overloads th…
• CVE-2021-30151中 6.1Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used.