Contributed Systems Sidekiq 7.0.4

CPE Details

Contributed Systems Sidekiq 7.0.4
contribsys
sidekiq
7.0.4
2023-04-27
12h27 +00:00
2023-04-27
12h29 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:contribsys:sidekiq:7.0.4:*:*:*:*:*:*:*

Informations

Vendor

contribsys

Product

sidekiq

Version

7.0.4

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-26141 2023-09-14 05h00 +00:00 Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service (DoS) due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests.
7.5
High
CVE-2023-1892 2023-04-05 00h00 +00:00 Cross-site Scripting (XSS) - Reflected in GitHub repository sidekiq/sidekiq prior to 7.0.8.
9.6
Critical