Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-unf_extUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-localeUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-little-pluggerUpgrade tfm-runtimeUpgrade rubygem-unicode-debugsourceUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-clampUpgrade rubygem-localeUpgrade rubygem-little-pluggerUpgrade rubygem-fast_gettextUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-loggingUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-unicode-debuginfoUpgrade satellite-cloneUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-powerbarUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-http-cookieUpgrade rubygem-unicodeUpgrade tfm-rubygem-apipie-bindingsUpgrade satellite-cliUpgrade tfm-rubygem-fast_gettextUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-multi_jsonUpgrade rubygem-domain_nameUpgrade rubygem-jwtUpgrade tfm-rubygem-amazing_printUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-unfUpgrade rubygem-powerbarUpgrade rubygem-loggingUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-rest-clientUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-http-cookieUpgrade tfm-rubygem-domain_nameUpgrade foreman-cliUpgrade rubygem-unf_extUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-unicode-display_widthUpgrade rubygem-unfUpgrade tfm-rubygem-rest-clientUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-highlineUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-mime-typesUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-highlineUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-clampUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-unicode-display_widthUpgrade rubygem-foreman_maintainUpgrade rubygem-amazing_printUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-unicode-debuginfo | Jul 14, 2022 | Apr 6, 2021 |
| Debian | — | Upgrade ruby-sidekiq | Mar 14, 2022 | Apr 6, 2021 |
| Redhat_linux | — | Upgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-unicodeUpgrade rubygem-rest-clientUpgrade rubygem-localeUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-rest-clientUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hashieUpgrade rubygem-oauthUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-domain_nameUpgrade satellite-maintainUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-localeUpgrade rubygem-netrcUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-multi_jsonUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-unicode-display_widthUpgrade rubygem-unf_extUpgrade rubygem-highlineUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-clampUpgrade tfm-rubygem-hashieUpgrade foreman-cliUpgrade tfm-rubygem-netrcUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-http-cookieUpgrade tfm-rubygem-apipie-bindingsUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-clampUpgrade rubygem-amazing_printUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-runtimeUpgrade tfm-rubygem-unfUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unicodeUpgrade rubygem-loggingUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-http-cookieUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade satellite-cloneUpgrade tfm-rubygem-loggingUpgrade rubygem-unicode-display_widthUpgrade rubygem-unicode-debuginfoUpgrade rubygem-apipie-bindingsUpgrade rubygem-domain_nameUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-little-pluggerUpgrade rubygem-mime-typesUpgrade rubygem-jwtUpgrade tfm-rubygem-oauthUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unfUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-powerbarUpgrade tfm-rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-little-plugger | Jul 14, 2022 | Apr 6, 2021 |
| Rocky_linux | — | Upgrade libdb-utils-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-debugsourceUpgrade libdb-cxx | Mar 12, 2024 | Apr 6, 2021 |
| Ubuntu | — | Upgrade ruby-sidekiq (Ubuntu Pro) | Jun 26, 2025 | Apr 6, 2021 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub