In api.rb in Sidekiq before 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph. This overloads the system, affecting the Web UI, and makes it unavailable to users.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade tfm-rubygem-clampUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-http-cookieUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-unicode-display_widthUpgrade rubygem-amazing_printUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade foreman-cliUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-powerbarUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-loggingUpgrade tfm-rubygem-little-pluggerUpgrade tfm-rubygem-apipie-bindingsUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-highlineUpgrade rubygem-oauthUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-fast_gettextUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-runtimeUpgrade rubygem-localeUpgrade satellite-cloneUpgrade tfm-rubygem-amazing_printUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-rest-clientUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-jwtUpgrade satellite-maintainUpgrade rubygem-unicode-debuginfoUpgrade rubygem-netrcUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-http-cookieUpgrade rubygem-unicode-display_widthUpgrade satellite-cliUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-domain_nameUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-unfUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-unicodeUpgrade rubygem-little-pluggerUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-clampUpgrade tfm-rubygem-rest-client | Jul 14, 2022 | Jan 21, 2022 |
| Debian | — | Upgrade ruby-sidekiq | Mar 14, 2022 | Jan 21, 2022 |
| Redhat_linux | — | Upgrade tfm-rubygem-localeUpgrade tfm-rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-powerbarUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-unfUpgrade tfm-rubygem-unicodeUpgrade satellite-cliUpgrade rubygem-highlineUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-domain_nameUpgrade tfm-rubygem-multi_jsonUpgrade foreman-cliUpgrade tfm-rubygem-netrcUpgrade rubygem-oauthUpgrade tfm-rubygem-http-cookieUpgrade rubygem-unicodeUpgrade tfm-rubygem-fast_gettextUpgrade tfm-runtimeUpgrade rubygem-netrcUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade satellite-maintainUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foremanUpgrade satellite-cloneUpgrade rubygem-hashieUpgrade tfm-rubygem-clampUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-oauthUpgrade rubygem-clampUpgrade rubygem-little-pluggerUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-little-pluggerUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-apipie-bindingsUpgrade tfm-rubygem-unf_extUpgrade rubygem-localeUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-unicode-display_widthUpgrade rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-hashieUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-rest-clientUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-jwtUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unicode-debugsourceUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-unfUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unf_extUpgrade rubygem-domain_nameUpgrade rubygem-fast_gettextUpgrade tfm-rubygem-hammer_cli_katelloUpgrade rubygem-http-cookieUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cliUpgrade rubygem-unicode-debuginfoUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-powerbarUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-loggingUpgrade tfm-rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_virt_who_configure | Jul 14, 2022 | Jan 21, 2022 |
| Rocky_linux | — | Upgrade libdb-cxx-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-debuginfoUpgrade libdb-cxxUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debugsourceUpgrade libdb-utils-debuginfo | Mar 12, 2024 | Jan 21, 2022 |
| Ubuntu | — | Upgrade ruby-sidekiq (Ubuntu Pro) | Jul 1, 2025 | Jan 21, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub