CVE-2023-46950

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-46950
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-46950.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-46950
Aliases
Published
2024-03-01T00:00:00Z
Modified
2026-08-12T03:51:42.936667028Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted URL to the filter functions.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/46xxx/CVE-2023-46950.json",
    "cna_assigner": "mitre"
}
References

Affected packages

Git / github.com/mhenrixon/sidekiq-unique-jobs

Affected ranges

Type
GIT
Repo
https://github.com/mhenrixon/sidekiq-unique-jobs
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
ce1e57ec4c6c4c4a709a26882a820e5fc7b6e498
Database specific
Show details 
{
    "source": "REFERENCES"
}

Affected versions

4.*
4.0.1
v2.*
v2.1.0
v2.2.0
v2.2.1
v2.3.2
v2.7.0
v3.*
v3.0.1
v3.0.10
v3.0.11
v3.0.2
v3.0.3
v3.0.9
v4.*
v4.0.0
v4.0.10
v4.0.11
v4.0.12
v4.0.13
v4.0.15
v4.0.16
v4.0.17
v4.0.18
v4.0.2
v4.0.3
v4.0.4
v4.0.5
v4.0.6
v4.0.7
v4.0.8
v4.0.9
v5.*
v5.0.0
v5.0.1
v5.0.10
v5.0.2
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v6.*
v6.0.0
v6.0.0.beta1
v6.0.0.beta2
v6.0.0.rc1
v6.0.0.rc2
v6.0.0.rc3
v6.0.0.rc4
v6.0.0.rc5
v6.0.0.rc6
v6.0.0.rc7
v6.0.0.rc8
v6.0.1
v6.0.10
v6.0.11
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.8
v6.0.9
v7.*
v7.0.0
v7.0.0.beta1
v7.0.0.beta10
v7.0.0.beta11
v7.0.0.beta12
v7.0.0.beta13
v7.0.0.beta14
v7.0.0.beta15
v7.0.0.beta16
v7.0.0.beta17
v7.0.0.beta18
v7.0.0.beta19
v7.0.0.beta2
v7.0.0.beta20
v7.0.0.beta21
v7.0.0.beta22
v7.0.0.beta23
v7.0.0.beta24
v7.0.0.beta25
v7.0.0.beta26
v7.0.0.beta27
v7.0.0.beta28
v7.0.0.beta29
v7.0.0.beta3
v7.0.0.beta4
v7.0.0.beta5
v7.0.0.beta7
v7.0.0.beta8
v7.0.0.beta9
v7.0.1
v7.0.10
v7.0.11
v7.0.12
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
v7.0.9
v7.1.0
v7.1.1
v7.1.10
v7.1.11
v7.1.12
v7.1.13
v7.1.14
v7.1.15
v7.1.16
v7.1.18
v7.1.19
v7.1.2
v7.1.20
v7.1.21
v7.1.22
v7.1.23
v7.1.24
v7.1.25
v7.1.26
v7.1.27
v7.1.28
v7.1.29
v7.1.3
v7.1.4
v7.1.5
v7.1.6
v7.1.7
v7.1.8
v8.*
v8.0.0
v8.0.1
v8.0.2
v8.0.3
v8.0.4
v8.0.5
v8.0.6

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-46950.json"

Git / github.com/sidekiq/sidekiq

Affected ranges

Type
GIT
Repo
https://github.com/sidekiq/sidekiq
Events
Introduced
ad0f13cac5138b891d54ef2f2df3460d5151e34c
Last affected
ad0f13cac5138b891d54ef2f2df3460d5151e34c
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:contribsys:sidekiq:6.5.8:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "6.5.8"
        },
        {
            "last_affected": "6.5.8"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

6.*
6.5.8
v6.*
v6.5.8

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-46950.json"