In api.rb in Sidekiq before 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph. This overloads the system, affecting the Web UI, and makes it unavailable to users.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-foreman_maintainUpgrade tfm-rubygem-domain_nameUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-jwtUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-netrcUpgrade rubygem-little-pluggerUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade satellite-cliUpgrade rubygem-mime-types-dataUpgrade rubygem-unfUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-localeUpgrade rubygem-mime-typesUpgrade rubygem-unicodeUpgrade rubygem-unicode-debuginfoUpgrade satellite-maintainUpgrade tfm-rubygem-multi_jsonUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-netrcUpgrade rubygem-unicode-display_widthUpgrade tfm-rubygem-rest-clientUpgrade rubygem-hashieUpgrade tfm-rubygem-mime-typesUpgrade rubygem-loggingUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-runtimeUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-little-pluggerUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-clampUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-amazing_printUpgrade satellite-cloneUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cliUpgrade rubygem-highlineUpgrade rubygem-localeUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade foreman-cliUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-powerbarUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-fast_gettextUpgrade rubygem-domain_nameUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-rest-clientUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-amazing_print | Jul 14, 2022 | Jan 21, 2022 |
| Debian | — | Upgrade ruby-sidekiq | Mar 14, 2022 | Jan 21, 2022 |
| Redhat_linux | — | Upgrade tfm-rubygem-unicodeUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-unicodeUpgrade rubygem-netrcUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-localeUpgrade satellite-cloneUpgrade tfm-runtimeUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-highlineUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-foreman_maintainUpgrade rubygem-hashieUpgrade tfm-rubygem-clampUpgrade rubygem-little-pluggerUpgrade satellite-cliUpgrade rubygem-mime-types-dataUpgrade foreman-cliUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-domain_nameUpgrade satellite-maintainUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-jwtUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-rest-clientUpgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade rubygem-oauthUpgrade rubygem-unicode-display_widthUpgrade rubygem-clampUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-unfUpgrade tfm-rubygem-http-cookieUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-loggingUpgrade tfm-rubygem-unicode-display_widthUpgrade rubygem-unf_extUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-mime-typesUpgrade rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-hashieUpgrade rubygem-unicode-debugsourceUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-jwtUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cliUpgrade tfm-rubygem-highlineUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-loggingUpgrade rubygem-domain_nameUpgrade rubygem-unicode-debuginfoUpgrade rubygem-http-cookieUpgrade tfm-rubygem-amazing_printUpgrade rubygem-powerbarUpgrade tfm-rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-localeUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-unfUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-amazing_print | Jul 14, 2022 | Jan 21, 2022 |
| Rocky_linux | — | Upgrade libdb-debugsourceUpgrade libdb-utils-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-cxx | Mar 12, 2024 | Jan 21, 2022 |
| Ubuntu | — | Upgrade ruby-sidekiq (Ubuntu Pro) | Jul 1, 2025 | Jan 21, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub