Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-localeUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-netrcUpgrade rubygem-domain_nameUpgrade tfm-rubygem-clampUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unicode-debugsourceUpgrade satellite-cliUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-mime-typesUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-jwtUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-multi_jsonUpgrade rubygem-little-pluggerUpgrade rubygem-fast_gettextUpgrade rubygem-loggingUpgrade satellite-maintainUpgrade rubygem-powerbarUpgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-oauthUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-jwtUpgrade rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_katelloUpgrade satellite-cloneUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-runtimeUpgrade rubygem-unicodeUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-amazing_printUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-unicode-display_widthUpgrade rubygem-clampUpgrade rubygem-highlineUpgrade rubygem-rest-clientUpgrade rubygem-oauthUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-multi_jsonUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-hashieUpgrade foreman-cliUpgrade tfm-rubygem-http-cookieUpgrade rubygem-hashieUpgrade rubygem-unf_extUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-domain_nameUpgrade rubygem-unicode-display_widthUpgrade tfm-rubygem-rest-clientUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_tasks | Jul 14, 2022 | Apr 6, 2021 |
| Debian | — | Upgrade ruby-sidekiq | Mar 14, 2022 | Apr 6, 2021 |
| Redhat_linux | — | Upgrade rubygem-unicode-display_widthUpgrade rubygem-apipie-bindingsUpgrade rubygem-unicodeUpgrade rubygem-unfUpgrade tfm-rubygem-jwtUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-http-cookieUpgrade tfm-rubygem-powerbarUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-http-cookieUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-domain_nameUpgrade rubygem-powerbarUpgrade rubygem-multi_jsonUpgrade rubygem-amazing_printUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-runtimeUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-jwtUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-oauthUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-fast_gettextUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-mime-typesUpgrade rubygem-unicode-debugsourceUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade satellite-cloneUpgrade satellite-cliUpgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-loggingUpgrade rubygem-unicode-debuginfoUpgrade tfm-rubygem-clampUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-domain_nameUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-localeUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-oauthUpgrade tfm-rubygem-netrcUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hashieUpgrade tfm-rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cliUpgrade rubygem-rest-clientUpgrade rubygem-highlineUpgrade tfm-rubygem-multi_jsonUpgrade foreman-cliUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-hashieUpgrade rubygem-netrcUpgrade tfm-rubygem-rest-clientUpgrade rubygem-clamp | Jul 14, 2022 | Apr 6, 2021 |
| Rocky_linux | — | Upgrade libdb-cxxUpgrade libdb-debugsourceUpgrade libdb-sql-devel-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-debuginfo | Mar 12, 2024 | Apr 6, 2021 |
| Ubuntu | — | Upgrade ruby-sidekiq (Ubuntu Pro) | Jun 26, 2025 | Apr 6, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub