Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-26141

Опубликовано: 14 сент. 2023
Источник: nvd
CVSS3: 7.5
CVSS3: 4.9
EPSS Низкий

Описание

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service (DoS) due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:contribsys:sidekiq:*:*:*:*:*:*:*:*
Версия до 6.5.10 (исключая)
cpe:2.3:a:contribsys:sidekiq:*:*:*:*:*:*:*:*
Версия от 7.0 (включая) до 7.1.3 (исключая)

EPSS

Процентиль: 60%
0.004
Низкий

7.5 High

CVSS3

4.9 Medium

CVSS3

Дефекты

CWE-400
CWE-345
CWE-400

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 2 лет назад

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service (DoS) due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests.

CVSS3: 4.9
redhat
больше 2 лет назад

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service (DoS) due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests.

CVSS3: 7.5
debian
больше 2 лет назад

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial ...

CVSS3: 5.7
github
больше 2 лет назад

sidekiq Denial of Service vulnerability

EPSS

Процентиль: 60%
0.004
Низкий

7.5 High

CVSS3

4.9 Medium

CVSS3

Дефекты

CWE-400
CWE-345
CWE-400