CVE-2023-1892
1 advisory.
RubyGems/sidekiq CVE-2023-1892: high 8.3, EPSS 2.74%
sidekiq vulnerable to cross-site scripting
Action: Upgrade sidekiq to 7.0.8 or later.
bundle update sidekiqAffected
| introduced | fixed | last affected |
|---|---|---|
| 7.0.4 | 7.0.8 | - |
Fixed versions
| 7.0.8 |
Sources
- osv: GHSA-h3r8-h5qw-4r35
- https://nvd.nist.gov/vuln/detail/CVE-2023-1892
- https://github.com/sidekiq/sidekiq/commit/458fdf74176a9881478c48dc5cf0269107b22214
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/sidekiq/CVE-2023-1892.yml
- https://github.com/sidekiq/sidekiq
- https://github.com/sidekiq/sidekiq/blob/main/Changes.md#708
- https://huntr.dev/bounties/e35e5653-c429-4fb8-94a3-cbc123ae4777
CVE-2023-1892 · published · modified · JSON