Описание
In api.rb in Sidekiq before 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph. This overloads the system, affecting the Web UI, and makes it unavailable to users.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needs-triage |
| devel | not-affected | 7.3.2+dfsg-1 |
| esm-apps-legacy/xenial | needed | |
| esm-apps/bionic | released | 5.0.4+dfsg-2ubuntu0.1~esm1 |
| esm-apps/focal | released | 5.2.7+dfsg-1ubuntu0.1~esm1 |
| esm-apps/jammy | released | 6.3.1+dfsg-1ubuntu0.1~esm1 |
| esm-apps/noble | not-affected | 6.5.12+dfsg-1 |
| esm-apps/resolute | not-affected | 7.3.2+dfsg-1 |
| esm-apps/xenial | ignored | end of ESM support, was needed |
| focal | ignored | end of standard support, was needs-triage |
Показывать по
EPSS
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
In api.rb in Sidekiq before 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph. This overloads the system, affecting the Web UI, and makes it unavailable to users.
In api.rb in Sidekiq before 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph. This overloads the system, affecting the Web UI, and makes it unavailable to users.
In api.rb in Sidekiq before 5.2.10 and 6.4.0, there is no limit on the ...
EPSS
5 Medium
CVSS2
7.5 High
CVSS3