Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-http-cookieUpgrade rubygem-loggingUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-mime-typesUpgrade tfm-rubygem-fast_gettextUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-apipie-bindingsUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-fast_gettextUpgrade satellite-maintainUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade satellite-cliUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-clampUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-little-pluggerUpgrade tfm-runtimeUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-jwtUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-unfUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-domain_nameUpgrade rubygem-multi_jsonUpgrade satellite-cloneUpgrade rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-localeUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-unicode-debuginfoUpgrade tfm-rubygem-unf_extUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-unf_extUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cliUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-http-cookieUpgrade rubygem-hashieUpgrade foreman-cliUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade rubygem-amazing_printUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-oauthUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-highlineUpgrade tfm-rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-clampUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-domain_nameUpgrade rubygem-unicode-display_widthUpgrade tfm-rubygem-rest-clientUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-hashieUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-hammer_cli_foreman_azure_rm | Jul 14, 2022 | Apr 6, 2021 |
| Debian | — | Upgrade ruby-sidekiq | Mar 14, 2022 | Apr 6, 2021 |
| Redhat_linux | — | Upgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-loggingUpgrade rubygem-unicode-debuginfoUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-loggingUpgrade rubygem-unicodeUpgrade tfm-runtimeUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-jwtUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-little-pluggerUpgrade rubygem-mime-types-dataUpgrade rubygem-domain_nameUpgrade rubygem-unicode-display_widthUpgrade rubygem-powerbarUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-http-cookieUpgrade satellite-cloneUpgrade tfm-rubygem-unfUpgrade rubygem-apipie-bindingsUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-fast_gettextUpgrade tfm-rubygem-clampUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-unicode-debugsourceUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-mime-typesUpgrade rubygem-multi_jsonUpgrade rubygem-amazing_printUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-http-cookieUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-rest-clientUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-mime-typesUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-oauthUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cliUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-multi_jsonUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-hashieUpgrade rubygem-hashieUpgrade tfm-rubygem-domain_nameUpgrade rubygem-unf_extUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-rest-clientUpgrade satellite-maintainUpgrade rubygem-highlineUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-netrcUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-localeUpgrade tfm-rubygem-netrc | Jul 14, 2022 | Apr 6, 2021 |
| Rocky_linux | — | Upgrade libdb-sql-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-debugsourceUpgrade libdb-cxx | Mar 12, 2024 | Apr 6, 2021 |
| Ubuntu | — | Upgrade ruby-sidekiq (Ubuntu Pro) | Jun 26, 2025 | Apr 6, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub