cve.bz

CVE-2023-46950

6.1 mediumEPSS 0.6%

Medium (6.1) in contribsys sidekiq. EPSS 0.6% chance of exploitation in the next 30 days. Fixed in sidekiq-unique-jobs 7.1.33, 8.0.7.

Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted URL to the filter functions.

Severity

CVSS 3.1

6.1 medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.6% chance of exploitation in the next 30 days; higher than 48% of CVEs (scores of 2026-10-31)
CWE
CWE-79
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-cmh9-rx85-xj38RubyGemssidekiq-unique-jobs>=8.0.0 <8.0.78.0.7
GHSA-cmh9-rx85-xj38RubyGemssidekiq-unique-jobs>=6.0.0.rc7 <7.1.337.1.33
GHSA-fhx8-5c23-x7x5RubyGemssidekiq-unique-jobs>=8.0.0 <8.0.78.0.7
GHSA-fhx8-5c23-x7x5RubyGemssidekiq-unique-jobs<7.1.337.1.33

References

Check your stackJSON