CVE-2023-1892

Опубликовано: 21 апр. 2023

Источник: debian

EPSS Низкий

Описание

Cross-site Scripting (XSS) - Reflected in GitHub repository sidekiq/sidekiq prior to 7.0.8.

Пакет	Статус	Версия исправления	Релиз	Тип
ruby-sidekiq	not-affected			package

https://huntr.dev/bounties/e35e5653-c429-4fb8-94a3-cbc123ae4777
Introduced by: https://github.com/sidekiq/sidekiq/commit/f68560742bcfd2e30b87c1bc2b65d834a1a05c73 (v7.0.4)
Fixed by: https://github.com/sidekiq/sidekiq/commit/458fdf74176a9881478c48dc5cf0269107b22214 (v7.0.8)

EPSS

Процентиль: 85%

0.02742

Низкий

CVE-2023-1892

CVSS3: 9.6

ubuntu

больше 3 лет назад

Cross-site Scripting (XSS) - Reflected in GitHub repository sidekiq/sidekiq prior to 7.0.8.

CVE-2023-1892

CVSS3: 9.6

redhat

больше 3 лет назад

Cross-site Scripting (XSS) - Reflected in GitHub repository sidekiq/sidekiq prior to 7.0.8.

CVE-2023-1892

CVSS3: 9.6

nvd

больше 3 лет назад

Cross-site Scripting (XSS) - Reflected in GitHub repository sidekiq/sidekiq prior to 7.0.8.

GHSA-h3r8-h5qw-4r35

CVSS3: 8.3

github

больше 3 лет назад

sidekiq vulnerable to cross-site scripting

EPSS

Процентиль: 85%

0.02742

Низкий