Cross Site Scripting Vulnerability in Contribsys Sidekiq Product
CVE-2023-46951

6.1MEDIUM

Key Information:

Vendor

Contribsys

Status
Sidekiq
Vendor
CVE Published:
1 March 2024

What is CVE-2023-46951?

The Cross Site Scripting vulnerability present in Contribsys' Sidekiq version 6.5.8 allows remote attackers to exploit the uniquejobs function. By submitting a crafted payload, an attacker could manipulate the application to reveal sensitive information, accentuating the need for immediate attention to security measures within this product.

References

https://www.link.com
https://link.org
https://github.com/mhenrixon/sidekiq-unique-jobs/security...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.