CVE-2022-23837
See a problem?- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-23837
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-23837.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-23837
- Aliases
- Related
- Published
- 2022-01-21T21:15:09Z
- Modified
- 2024-09-11T04:42:24.972187Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
In api.rb in Sidekiq before 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph. This overloads the system, affecting the Web UI, and makes it unavailable to users.
- References
-
- https://github.com/rubysec/ruby-advisory-db/pull/495
- https://lists.debian.org/debian-lts-announce/2022/03/msg00015.html
- https://github.com/TUTUMSPACE/exploits/blob/main/sidekiq.md
- https://github.com/mperham/sidekiq/commit/7785ac1399f1b28992adb56055f6acd88fd1d956
- https://lists.debian.org/debian-lts-announce/2023/03/msg00011.html
- https://security-tracker.debian.org/tracker/CVE-2022-23837
Affected packages
Debian:11 / ruby-sidekiq
Package
- Name
- ruby-sidekiq
- Purl
- pkg:deb/debian/ruby-sidekiq?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Debian:12 / ruby-sidekiq
Package
- Name
- ruby-sidekiq
- Purl
- pkg:deb/debian/ruby-sidekiq?arch=source
Debian:13 / ruby-sidekiq
Package
- Name
- ruby-sidekiq
- Purl
- pkg:deb/debian/ruby-sidekiq?arch=source
Git / github.com/mperham/sidekiq
Affected ranges
- Type
- GIT
- Repo
- https://github.com/mperham/sidekiq
- Events
- Type
- GIT
- Repo
- https://github.com/sidekiq/sidekiq
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
Other
list
v0.*
v0.10.0
v0.5.0
v0.5.1
v0.7.0
v0.8.0
v1.*
v1.0.0
v1.1.0
v1.1.1
v1.1.4
v1.2.0
v1.2.1
v2.*
v2.0.0
v2.0.1
v2.0.3
v2.1.0
v2.10.0
v2.11.0
v2.11.1
v2.11.2
v2.12.0
v2.12.1
v2.12.3
v2.12.4
v2.13.0
v2.13.1
v2.14.0
v2.14.1
v2.15.2
v2.16.1
v2.17.0
v2.17.1
v2.17.2
v2.17.4
v2.17.7
v2.2.1
v2.3.2
v2.3.3
v2.4.0
v2.5.0
v2.5.2
v2.5.3
v2.6.0
v2.6.1
v2.6.2
v2.6.3
v2.6.4
v2.6.5
v2.7.0
v2.7.1
v2.7.2
v2.7.3
v2.7.4
v2.7.5
v2.8.0
v3.*
v3.0.0
v3.0.1
v3.0.2
v3.1.1
v3.1.2
v3.1.3
v3.1.4
v3.2.0
v3.2.1
v3.2.2
v3.2.3
v3.2.4
v3.2.5
v3.2.6
v3.3.0
v3.3.1
v3.3.2
v3.3.3
v3.3.4
v3.4.0
v3.4.1
v3.4.2
v3.5.0
v3.5.1
v3.5.2
v3.5.3
v3.5.4
v4.*
v4.0.0
v4.0.0.pre1
v4.0.0.pre2
v4.0.1
v4.0.2
v4.1.0
v4.1.1
v4.1.2
v4.1.3
v4.1.4
v4.2.0
v4.2.1
v4.2.10
v4.2.2
v4.2.3
v4.2.4
v4.2.5
v4.2.6
v4.2.7
v4.2.8
v4.2.9
v5.*
v5.0.0
v5.0.0.beta1
v5.0.0.beta2
v5.0.0.beta3
v5.0.0.rc1
v5.0.1
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.1.0
v5.1.1
v5.1.2
v5.1.3
v5.2.0
v5.2.1
v5.2.2
v5.2.3
v5.2.4
v5.2.5
v5.2.6
v5.2.7
v6.*
v6.0.0
v6.0.0.pre1
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.1.0
v6.1.1
v6.1.2
v6.1.3
v6.2.0
v6.2.1
v6.2.2
v6.3.0
v6.3.1