Lucene search
+L

238 matches found

OSV
OSV
added 2023/11/06 12:01 p.m.18 views

CVE-2023-3246 Allocation of Resources Without Limits or Throttling in GitLab

An issue has been discovered in GitLab EE/CE affecting all versions starting before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1 which allows an attackers to block Sidekiq job processor...

4.3CVSS4.6AI score
SaveExploits0References5
Cvelist
Cvelist
added 2023/11/06 12:01 p.m.32 views

CVE-2023-3246 Allocation of Resources Without Limits or Throttling in GitLab

An issue has been discovered in GitLab EE/CE affecting all versions starting before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1 which allows an attackers to block Sidekiq job processor...

4.3CVSS5AI score0.00526EPSS
SaveExploits0References2
CVE
CVE
added 2023/11/06 12:01 p.m.356 views

CVE-2023-3246

CVE-2023-3246 affects GitLab EE/CE across multiple branches: all versions before 16.3.6, all versions from 16.4 before 16.4.2, and all versions from 16.5 before 16.5.1, with the impact described as the ability for an attacker to block the Sidekiq job processor. The connected documents reiterate t...

4.3CVSS4.6AI score0.00526EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2023/11/06 12:01 p.m.72 views

CVE-2023-3246

Removed by vendor...

4.3CVSS5.8AI score0.00526EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/11/06 12:00 a.m.2 views

PT-2023-23803 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE/CE versions prior to 16.3.6 GitLab EE/CE versions 16.4.0 through 16.4.1 GitLab EE/CE versions 16.5.0 Description: An issue has been discovered in GitLab EE/CE that allows attackers to block the Sidekiq job processor. Recommendations...

4.3CVSS6.5AI score0.00526EPSS
SaveExploits0References12
CNNVD
CNNVD
added 2023/11/01 12:00 a.m.10 views

GitLab Security Breach

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. A security vulnerability exists in GitLab that stems from allowing an attacker...

4.3CVSS7AI score0.00526EPSS
SaveExploits0References4
Veracode
Veracode
added 2023/09/20 8:31 a.m.24 views

Denial Of Service

sidekiq is vulnerable to Denial Of Service. The vulnerability is due to insufficient localStorage checks in the dashboard-charts.js file. The attacker can exploit this issue by manipulating the localeStorage.sidekiqTimeInterval which leads to Denial of Service...

7.5CVSS6.8AI score0.0075EPSS
SaveExploits1References4Affected Software2
RedhatCVE
RedhatCVE
added 2023/09/18 8:24 a.m.14 views

CVE-2023-26141

A denial of service vulnerability was found in Sidekiq. This flaw allows an attacker to manipulate the localStorage value in the dashboard-charts.js file and cause excessive polling requests...

4.9CVSS6.6AI score0.0075EPSS
SaveExploits1References4
OSV
OSV
added 2023/09/14 6:30 a.m.72 views

GHSA-3QC2-V3HP-6CV8 sidekiq Denial of Service vulnerability

Versions of the package sidekiq before 7.1.3 and 6.5.10 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

5.7CVSS5.9AI score0.0075EPSS
SaveExploits1References9
Github Security Blog
Github Security Blog
added 2023/09/14 6:30 a.m.31 views

sidekiq Denial of Service vulnerability

Versions of the package sidekiq before 7.1.3 and 6.5.10 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

7.5CVSS5.3AI score0.0075EPSS
SaveExploits1References9Affected Software1
NVD
NVD
added 2023/09/14 5:15 a.m.34 views

CVE-2023-26141

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

7.5CVSS7.5AI score0.0075EPSS
SaveExploits1References4
OSV
OSV
added 2023/09/14 5:15 a.m.21 views

DEBIAN-CVE-2023-26141

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

4.9CVSS6.9AI score0.0075EPSS
SaveExploits1References1
Prion
Prion
added 2023/09/14 5:15 a.m.13 views

Input validation

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

3.3CVSS4.9AI score0.0075EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2023/09/14 5:15 a.m.7 views

UBUNTU-CVE-2023-26141

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

7.5CVSS5.8AI score0.0075EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/09/14 5:00 a.m.10 views

CVE-2023-26141

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

7.5CVSS6.5AI score0.0075EPSS
SaveExploits1References4
CVE
CVE
added 2023/09/14 5:00 a.m.108 views

CVE-2023-26141

CVE-2023-26141 affects sidekiq prior to 7.1.3. The vulnerability arises from insufficient checks in the dashboard-charts.js file, allowing an attacker to manipulate localStorage and trigger excessive polling, leading to Denial of Service. The DoS impact is documented across multiple feeds, with t...

7.5CVSS4.8AI score0.0075EPSS
SaveExploits1References4Affected Software1
Debian CVE
Debian CVE
added 2023/09/14 5:00 a.m.82 views

CVE-2023-26141

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

7.5CVSS5.7AI score0.0075EPSS
SaveExploits1
RubySec
RubySec
added 2023/09/14 12:00 a.m.40 views

sidekiq Denial of Service vulnerability

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

7.5CVSS6.8AI score0.0075EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2023/09/14 12:00 a.m.13 views

Mike Perham sidekiq data forgery issue vulnerability

Mike Perham sidekiq is a Mike Perham open source application. Using threads to process many jobs simultaneously in the same process A security vulnerability in Mike Perham sidekiq prior to version 7.1.3, which stems from insufficient checking of the file dashboard-charts.js, allows an attacker to...

7.5CVSS6.5AI score0.0075EPSS
SaveExploits1References6
UbuntuCve
UbuntuCve
added 2023/09/14 12:00 a.m.29 views

CVE-2023-26141

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

7.5CVSS6.3AI score0.0075EPSS
SaveExploits1References1
Rows per page
Query Builder