| CVE | CVE-2023-26141 |
| CVE Title | |
| Published Date | 2023-09-14T05:15Z |
| Modified Date | 2023-09-20T18:53Z |
| CWE Type | CWE-345 |
| CVSS 3.x | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H |
| Description | Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service (DoS) due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests. |
| References | |
| By clicking these links you will leave this website. We do not endorse and will not be held accountable for any activity on external sites. | |
| Reference URL | https://gist.github.com/keeganparr1/1dffd3c017339b7ed5371ed3d81e6b2a |
| Reference Description | MISC https://gist.github.com/keeganparr1/1dffd3c017339b7ed5371ed3d81e6b2a |
| Reference URL | https://github.com/sidekiq/sidekiq/blob/6-x/web/assets/javascripts/dashboard.js%23L6 |
| Reference Description | MISC https://github.com/sidekiq/sidekiq/blob/6-x/web/assets/javascripts/dashboard.js%23L6 |
| Reference URL | https://github.com/sidekiq/sidekiq/commit/62c90d7c5a7d8a378d79909859d87c2e0702bf89 |
| Reference Description | MISC https://github.com/sidekiq/sidekiq/commit/62c90d7c5a7d8a378d79909859d87c2e0702bf89 |
| Reference URL | https://security.snyk.io/vuln/SNYK-RUBY-SIDEKIQ-5885107 |
| Reference Description | MISC https://security.snyk.io/vuln/SNYK-RUBY-SIDEKIQ-5885107 |
| Tags | Exploit |
| Sources | NIST MITRE |
