Cross-site Scripting (XSS)

Sidekiq is vulnerable to Cross-site Scripting XSS. The vulnerability is due to a lack of encoding within the Queues page in metrics.erb, which allows an attacker to inject JavaScript code through the substr parameter in the response, potentially compromising user accounts and data...