Cross-Site Scripting Vulnerability in Sidekiq by Ruby
CVE-2021-30151

6.1MEDIUM

Key Information:

Vendor: Contribsys
Status: Sidekiq
Vendor: CVE Published:; 6 April 2021

What is CVE-2021-30151?

A Cross-Site Scripting vulnerability exists in the Sidekiq application, which allows attackers to inject malicious scripts via the queue name in the live-poll feature specifically when using Internet Explorer. This issue poses significant risks as it can lead to unauthorized access and manipulation of user data. It is crucial for users to update their Sidekiq installations to prevent potential exploitation from this vulnerability.