Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Sqbell

#35490of 53,633
7.5Total CVSS
Vulnerabilities · 1
PT-2022-16287
7.5
2022-01-21
Sidekiq · Sidekiq · CVE-2022-23837
**Name of the Vulnerable Software and Affected Versions** Sidekiq versions prior to 5.2.10 Sidekiq versions prior to 6.4.0 **Description** The issue arises from the lack of a limit on the number of days when requesting stats for the graph in `api.rb` in Sidekiq. This leads to an overload of the system, affecting the Web UI and making it unavailable to users. **Recommendations** For versions prior to 5.2.10, update to version 5.2.10 or later to resolve the issue. For versions prior to 6.4.0, update to version 6.4.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the `api.rb` file or limiting the number of days when requesting stats for the graph to minimize the risk of exploitation.