ADVISORIES

• OSVDB-126331
• Vendor Advisory

GEM

sidekiq-pro

PATCHED VERSIONS

• ~> 1.9.3
• >= 2.0.6

DESCRIPTION

Sidekiq::Web job filtering lacks CSRF protection. This issue is related to OSVDB-125675.

RELATED

• OSVDB-125675
• https://github.com/sidekiq/sidekiq/blob/main/Pro-Changes.md#206-193
• https://github.com/sidekiq/sidekiq/issues/2442
• https://github.com/sidekiq/sidekiq/issues/2467
• https://github.com/rubysec/ruby-advisory-db/pull/201
• https://security.snyk.io/vuln/SNYK-RUBY-SIDEKIQPRO-20234