~ / search / GHSA-3qc2-v3hp-6cv8

GHSA-3qc2-v3hp-6cv8

sidekiq Denial of Service vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-26141

Packages

EcosystemPackageAffectedFixed in
RubyGems sidekiq >= 7.0.0, < 7.1.3 7.1.3
RubyGems sidekiq < 6.5.10 6.5.10

Details

As written in the advisory (Markdown source, shown as plain text).

Versions of the package sidekiq before 7.1.3 and 6.5.10 are vulnerable to Denial of Service (DoS) due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests.

References

External links from the advisory. They lead to third-party sites.