Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-fast_gettextUpgrade rubygem-powerbarUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-loggingUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-unf_extUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unicode-debugsourceUpgrade tfm-runtimeUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-little-pluggerUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-clampUpgrade rubygem-domain_nameUpgrade rubygem-http-cookieUpgrade rubygem-unicodeUpgrade satellite-cliUpgrade tfm-rubygem-fast_gettextUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foremanUpgrade satellite-cloneUpgrade rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-mime-typesUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-amazing_printUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-jwtUpgrade rubygem-netrcUpgrade tfm-rubygem-unfUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-apipie-bindingsUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-domain_nameUpgrade rubygem-unicode-display_widthUpgrade rubygem-unf_extUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-oauthUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-unfUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-clampUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-highlineUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-netrcUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cliUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade rubygem-foreman_maintainUpgrade rubygem-amazing_printUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-http-cookieUpgrade rubygem-hashieUpgrade foreman-cli | Jul 14, 2022 | Apr 6, 2021 |
| Debian | — | Upgrade ruby-sidekiq | Mar 14, 2022 | Apr 6, 2021 |
| Redhat_linux | — | Upgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-jwtUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-multi_jsonUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unicode-display_widthUpgrade tfm-rubygem-unfUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-http-cookieUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-little-pluggerUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-unicodeUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-http-cookieUpgrade rubygem-unicode-debuginfoUpgrade rubygem-jwtUpgrade rubygem-little-pluggerUpgrade rubygem-mime-typesUpgrade rubygem-unfUpgrade rubygem-unicode-debugsourceUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-clampUpgrade rubygem-amazing_printUpgrade tfm-rubygem-amazing_printUpgrade rubygem-domain_nameUpgrade rubygem-loggingUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade tfm-runtimeUpgrade tfm-rubygem-powerbarUpgrade satellite-cliUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-foreman_maintainUpgrade foreman-cliUpgrade tfm-rubygem-unicodeUpgrade rubygem-netrcUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-rest-clientUpgrade tfm-rubygem-unicode-display_widthUpgrade rubygem-highlineUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-unf_extUpgrade rubygem-oauthUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-hammer_cli_katelloUpgrade rubygem-localeUpgrade satellite-maintainUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-domain_nameUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hashieUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-netrcUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-rest-clientUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configure | Jul 14, 2022 | Apr 6, 2021 |
| Rocky_linux | — | Upgrade libdb-debugsourceUpgrade libdb-cxxUpgrade libdb-cxx-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debuginfoUpgrade libdb-sql-debuginfo | Mar 12, 2024 | Apr 6, 2021 |
| Ubuntu | — | Upgrade ruby-sidekiq (Ubuntu Pro) | Jun 26, 2025 | Apr 6, 2021 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub