What’s Vulnerable › Vulnerabilities

CVE-2023-46951

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-03-01 · updated 2026-06-17
• Weakness: CWE-79

Description

Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted payload to the uniquejobs function.

Affected products

• sidekiq/sidekiq: 6.5.8

References

• https://github.com/mhenrixon/sidekiq-unique-jobs/pull/829
• https://github.com/mhenrixon/sidekiq-unique-jobs/releases/tag/v8.0.7
• https://github.com/mhenrixon/sidekiq-unique-jobs/security/advisories/GHSA-cmh9-rx85-xj38
• https://link.org
• https://www.link.com
• https://www.mgm-sp.com/cve/sidekiq-unique-jobs-reflected-xss-cve-2023-46950-cve-2023-46951
• https://github.com/mhenrixon/sidekiq-unique-jobs/security/advisories/GHSA-cmh9-rx85-xj38
• https://link.org
• https://www.link.com

Get alerted when CVE-2023-46951 or the next vulnerability affects your stack