CVE-2021-30151 (sidekiq): Cross-site Scripting in Sidekiq

October 6th, 2021

ADVISORIES

GEM

SEVERITY

CVSS v3.x: 6.1 (Medium)

PATCHED VERSIONS

~> 5.2.0
>= 6.2.1

DESCRIPTION

Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used.