In api.rb in Sidekiq before 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph. This overloads the system, affecting the Web UI, and makes it unavailable to users.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-domain_nameUpgrade rubygem-fast_gettextUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-unicode-display_widthUpgrade rubygem-amazing_printUpgrade rubygem-powerbarUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-apipie-bindingsUpgrade rubygem-localeUpgrade rubygem-rest-clientUpgrade rubygem-oauthUpgrade rubygem-loggingUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade satellite-cloneUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-apipie-bindingsUpgrade tfm-rubygem-clampUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-unf_extUpgrade rubygem-http-cookieUpgrade tfm-rubygem-amazing_printUpgrade rubygem-unicode-debugsourceUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-mime-typesUpgrade tfm-runtimeUpgrade rubygem-jwtUpgrade rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-domain_nameUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unfUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-http-cookieUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-oauthUpgrade satellite-maintainUpgrade rubygem-little-pluggerUpgrade rubygem-mime-typesUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-rest-clientUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-jwtUpgrade rubygem-clampUpgrade rubygem-unicodeUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-unicode-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-netrcUpgrade satellite-cliUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_openscap | Jul 14, 2022 | Jan 21, 2022 |
| Debian | — | Upgrade ruby-sidekiq | Mar 14, 2022 | Jan 21, 2022 |
| Redhat_linux | — | Upgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-unicodeUpgrade rubygem-netrcUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-localeUpgrade satellite-cloneUpgrade tfm-runtimeUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-highlineUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-foreman_maintainUpgrade rubygem-hashieUpgrade tfm-rubygem-clampUpgrade rubygem-little-pluggerUpgrade satellite-cliUpgrade rubygem-mime-types-dataUpgrade foreman-cliUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-domain_nameUpgrade satellite-maintainUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-jwtUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-rest-clientUpgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade rubygem-oauthUpgrade rubygem-unicode-display_widthUpgrade rubygem-clampUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-unfUpgrade tfm-rubygem-http-cookieUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-loggingUpgrade tfm-rubygem-unicode-display_widthUpgrade rubygem-unf_extUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-mime-typesUpgrade rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-hashieUpgrade rubygem-unicode-debugsourceUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-jwtUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cliUpgrade tfm-rubygem-highlineUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-loggingUpgrade rubygem-domain_nameUpgrade rubygem-unicode-debuginfoUpgrade rubygem-http-cookieUpgrade tfm-rubygem-amazing_printUpgrade rubygem-powerbarUpgrade tfm-rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-localeUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-unfUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-amazing_print | Jul 14, 2022 | Jan 21, 2022 |
| Rocky_linux | — | Upgrade libdb-debugsourceUpgrade libdb-utils-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-cxx | Mar 12, 2024 | Jan 21, 2022 |
| Ubuntu | — | Upgrade ruby-sidekiq (Ubuntu Pro) | Jul 1, 2025 | Jan 21, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub