Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-26141HistorySep 14, 2023 - 5:15 a.m.
CVE-2023-26141
2023-09-1405:15:11
Debian Security Bug Tracker
security-tracker.debian.org
10
sidekiq
denial of service
dashboard-charts.js
localstorage
polling requests
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P
EPSS
0.001
Percentile
41.9%
Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service (DoS) due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | ruby-sidekiq | <= 6.4.1+dfsg-1 | ruby-sidekiq_6.4.1+dfsg-1_all.deb |
| Debian | 11 | all | ruby-sidekiq | <= 6.0.4+dfsg-2 | ruby-sidekiq_6.0.4+dfsg-2_all.deb |
| Debian | 999 | all | ruby-sidekiq | < 7.2.1+dfsg-2 | ruby-sidekiq_7.2.1+dfsg-2_all.deb |
| Debian | 13 | all | ruby-sidekiq | < 7.2.1+dfsg-2 | ruby-sidekiq_7.2.1+dfsg-2_all.deb |
Related
veracode
veracode
Denial Of Service
2023-09-20 08:31:53
cve
cve
CVE-2023-26141
2023-09-14 05:15:11
prion
prion
Input validation
2023-09-14 05:15:00
rubygems
rubygems
sidekiq Denial of Service vulnerability
2023-09-13 21:00:00
ubuntucve
ubuntucve
CVE-2023-26141
2023-09-14 00:00:00
osv
osv
sidekiq Denial of Service vulnerability
2023-09-14 06:30:19
CVE-2023-26141
2023-09-14 05:15:11
redhatcve
redhatcve
CVE-2023-26141
2023-09-18 08:24:36
cvelist
cvelist
CVE-2023-26141
2023-09-14 05:00:00
github
github
sidekiq Denial of Service vulnerability
2023-09-14 06:30:19
nvd
nvd
CVE-2023-26141
2023-09-14 05:15:11
redhat
redhat
(RHSA-2024:0797) Important: Satellite 6.14.2 Async Security Update
2024-02-13 14:38:17
nessus
nessus
RHEL 8 : Satellite 6.14.2 Async Security Update (Important) (RHSA-2024:0797)
2024-04-28 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P
EPSS
0.001
Percentile
41.9%
Related for DEBIANCVE:CVE-2023-26141