23 matches found
Sidekiq <=6.2.0 - Cross-Site Scripting
Sidekiq through 5.1.3 and 6.x through 6.2.0 contains a cross-site scripting vulnerability via the queue name of the live-poll feature when Internet Explorer is used. id: CVE-2021-30151 info: name: Sidekiq =6.2.0 - Cross-Site Scripting author: DhiyaneshDk severity: medium description: Sidekiq...
Sidekiq < 7.0.8 - Cross-Site Scripting
An XSS vulnerability on a Sidekiq admin panel can pose serious risks to the security and functionality of the system. id: CVE-2023-1892 info: name: Sidekiq 7.0.8 - Cross-Site Scripting author: ritikchaddha,princechaddha severity: critical description: | An XSS vulnerability on a Sidekiq admin pan...
CVE-2023-46951
Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted payload to the uniquejobs function...
CVE-2023-46950
Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted URL to the filter functions...
GO-2023-2067 Faktory Web Dashboard can lead to denial of service(DOS) via malicious user input in github.com/contribsys/faktory
Faktory Web Dashboard can lead to denial of serviceDOS via malicious user input in github.com/contribsys/faktory...
GHSA-FHX8-5C23-X7X5 Cross Site Scripting vulnerability in Contribsys Sidekiq
Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted URL to the filter functions...
Cross Site Scripting vulnerability in Contribsys Sidekiq
Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted URL to the filter functions...
CVE-2023-46950
Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted URL to the filter functions...
CVE-2023-46951
Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted payload to the uniquejobs function...
Cross site scripting
Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted payload to the uniquejobs function...
Cross site scripting
Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted URL to the filter functions...
CVE-2023-46951
Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted payload to the uniquejobs function...
CVE-2023-46951
Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted payload to the uniquejobs function...
CVE-2023-46951
Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted payload to the uniquejobs function...
CVE-2023-46951: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted payload to the uniquejobs function...
CVE-2023-46950
Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted URL to the filter functions...
CVE-2023-46950
A Cross Site Scripting (XSS) vulnerability exists in Contribsys Sidekiq (specifically SidekiqUniqueJobs ), affecting versions prior to 8.0.7 and prior to 7.1.33 . The flaw allows a remote attacker to obtain sensitive information by using a crafted URL targeting the filter functions or the uniquej...
CVE-2023-46951
Contribsys Sidekiq v.6.5.8 is vulnerable to Cross-Site Scripting (XSS) . The flaw stems from insufficient validation of user input within the filter functions and uniquejobs function. A remote attacker can exploit this by providing a crafted URL or payload to obtain sensitive information, such as...
CVE-2023-46950: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted URL to the filter functions...