CVE-2023-26141

🗓️ 14 Sep 2023 05:00:00Reported by snykType

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service (DoS) due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests

Reporter	Title	Published	Views	Family All 23
Circl	CVE-2023-26141	14 Sep 202312:24	–	circl
CNNVD	Mike Perham sidekiq data forgery issue vulnerability	14 Sep 202300:00	–	cnnvd
Cvelist	CVE-2023-26141	14 Sep 202305:00	–	cvelist
Debian CVE	CVE-2023-26141	14 Sep 202305:00	–	debiancve
EUVD	EUVD-2023-2408	3 Oct 202520:07	–	euvd
Github Security Blog	sidekiq Denial of Service vulnerability	14 Sep 202306:30	–	github
NVD	CVE-2023-26141	14 Sep 202305:15	–	nvd
OSV	DEBIAN-CVE-2023-26141	14 Sep 202305:15	–	osv
OSV	GHSA-3QC2-V3HP-6CV8 sidekiq Denial of Service vulnerability	14 Sep 202306:30	–	osv
OSV	RHSA-2024:0797 Red Hat Security Advisory: Satellite 6.14.2 Async Security Update	30 Sep 202407:12	–	osv

NVD

Node

contribsys sidekiqRange<6.5.10

contribsys sidekiqRange7.0–7.1.3

[
  {
    "product": "sidekiq",
    "versions": [
      {
        "version": "0",
        "lessThan": "7.1.3",
        "status": "affected",
        "versionType": "semver"
      }
    ],
    "vendor": "n/a"
  }
]

Source	Link
github	www.github.com/sidekiq/sidekiq/commit/62c90d7c5a7d8a378d79909859d87c2e0702bf89
security	www.security.snyk.io/vuln/SNYK-RUBY-SIDEKIQ-5885107
github	www.github.com/sidekiq/sidekiq/blob/6-x/web/assets/javascripts/dashboard.js%23L6
gist	www.gist.github.com/keeganparr1/1dffd3c017339b7ed5371ed3d81e6b2a

21 Nov 2024 07:50Current

4.8Medium risk

Vulners AI Score4.8

CVSS 3.14.9 - 7.5

EPSS0.0045

SSVC