tocsin

Debian/ruby-sidekiq: medium 6.1

Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used.

Action: Upgrade ruby-sidekiq to 6.3.1+dfsg-1 or later.

Affected

introducedfixedlast affected
06.3.1+dfsg-1-

Fixed versions

6.3.1+dfsg-1

Sources

published · modified · JSON