CVE-2021-30151

Source
https://nvd.nist.gov/vuln/detail/CVE-2021-30151
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-30151.json
Aliases
Related
Published
2021-04-06T06:15:15Z
Modified
2023-11-29T08:49:56.464294Z
Details

Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used.

References

Affected packages

Git / github.com/mperham/sidekiq

Affected ranges

Type
GIT
Repo
https://github.com/mperham/sidekiq
Events
Introduced
8ddec63e9144d9ac0bd80c9a828eae46945f5608
Last affected
a412dc2d1d6c50c77c86957c0ef526d5fe53ee74
Last affected
873f1df9e0171a6eb1f9e6f50152f78e045b6df5
Type
GIT
Repo
https://github.com/sidekiq/sidekiq
Events
Introduced
8ddec63e9144d9ac0bd80c9a828eae46945f5608
Last affected
a412dc2d1d6c50c77c86957c0ef526d5fe53ee74
Last affected
873f1df9e0171a6eb1f9e6f50152f78e045b6df5

Affected versions

v6.*

v6.0.0
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.1.0
v6.1.1
v6.1.2
v6.1.3
v6.2.0