CVE-2023-46951

概要

参考情報

• mhenrixon/sidekiq-unique-jobs#829 · Issue Tracking
• mhenrixon/sidekiq-unique-jobs release v8.0.7 · Release Notes
• mhenrixon/sidekiq-unique-jobs security advisory · Exploit
• link.org · Permissions Required
• link.com · Not Applicable
• mgm-sp.com/cve/sidekiq-unique-jobs-reflected-xss-cve-2023-46950-cve-2023-46951 · Third Party Advisory

sidekiq のその他の脆弱性

• CVE-2023-46950中 6.1Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted URL …
• CVE-2023-26141中 4.9Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service (DoS) due to insufficient checks in the dashboard-charts.js…
• CVE-2023-1892緊急 9.6Cross-site Scripting (XSS) - Reflected in GitHub repository sidekiq/sidekiq prior to 7.0.8.
• CVE-2022-23837高 7.5In api.rb in Sidekiq before 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph. This overloads th…
• CVE-2021-30151中 6.1Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used.