In api.rb in Sidekiq before 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph. This overloads the system, affecting the Web UI, and makes it unavailable to users.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-amazing_printUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade rubygem-powerbarUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-little-pluggerUpgrade tfm-rubygem-clampUpgrade rubygem-fast_gettextUpgrade tfm-rubygem-unicode-display_widthUpgrade rubygem-unicode-debugsourceUpgrade foreman-cliUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-localeUpgrade rubygem-hammer_cliUpgrade rubygem-highlineUpgrade rubygem-jwtUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-oauthUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-apipie-bindingsUpgrade rubygem-unf_ext-debuginfoUpgrade satellite-cloneUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-runtimeUpgrade rubygem-http-cookieUpgrade tfm-rubygem-powerbarUpgrade rubygem-loggingUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-unfUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-unicodeUpgrade rubygem-mime-typesUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-unfUpgrade rubygem-multi_jsonUpgrade rubygem-unicode-display_widthUpgrade satellite-cliUpgrade tfm-rubygem-rest-clientUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade satellite-maintainUpgrade rubygem-little-pluggerUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-unicodeUpgrade tfm-rubygem-jwtUpgrade rubygem-clampUpgrade rubygem-unicode-debuginfoUpgrade tfm-rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-netrcUpgrade tfm-rubygem-http-cookieUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-hammer_cli_foreman_azure_rm | Jul 14, 2022 | Jan 21, 2022 |
| Debian | — | Upgrade ruby-sidekiq | Mar 14, 2022 | Jan 21, 2022 |
| Redhat_linux | — | Upgrade rubygem-loggingUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-hashieUpgrade rubygem-jwtUpgrade rubygem-localeUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-unicode-display_widthUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-mime-typesUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-powerbarUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-loggingUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-domain_nameUpgrade rubygem-amazing_printUpgrade rubygem-mime-typesUpgrade rubygem-unf_extUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-unfUpgrade rubygem-http-cookieUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unicode-debuginfoUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-http-cookieUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-unicode-display_widthUpgrade satellite-maintainUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-unicodeUpgrade tfm-rubygem-powerbarUpgrade tfm-runtimeUpgrade rubygem-unfUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade rubygem-oauthUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-little-pluggerUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-foreman_maintainUpgrade rubygem-mime-types-dataUpgrade satellite-cliUpgrade satellite-cloneUpgrade rubygem-highlineUpgrade tfm-rubygem-rest-clientUpgrade tfm-rubygem-domain_nameUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hashieUpgrade tfm-rubygem-clampUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-netrcUpgrade foreman-cliUpgrade tfm-rubygem-multi_json | Jul 14, 2022 | Jan 21, 2022 |
| Rocky_linux | — | Upgrade libdb-debugsourceUpgrade libdb-sql-devel-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-debuginfoUpgrade libdb-cxxUpgrade libdb-sql-debuginfoUpgrade libdb-cxx-debuginfo | Mar 12, 2024 | Jan 21, 2022 |
| Ubuntu | — | Upgrade ruby-sidekiq (Ubuntu Pro) | Jul 1, 2025 | Jan 21, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub