~ / search / GHSA-grh7-935j-hg6w

GHSA-grh7-935j-hg6w

Cross-site Scripting in Sidekiq

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-30151

Packages

EcosystemPackageAffectedFixed in
RubyGems sidekiq < 5.2.0 5.2.0
RubyGems sidekiq >= 6.0.0, < 6.2.1 6.2.1

Details

As written in the advisory (Markdown source, shown as plain text).

Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used.

References

External links from the advisory. They lead to third-party sites.