CVE-2023-46950

Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted URL to the filter functions.

Published: Mar 1, 2024
Updated: May 4, 2025
CVE: CVE-2023-46950
Exploit:

No technical information available.

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
contribsys / sidekiq	6.5.8	6.5.8.x

https://github.com/mhenrixon/sidekiq-unique-jobs/pull/829
https://github.com/mhenrixon/sidekiq-unique-jobs/releases/tag/v8.0.7
https://github.com/mhenrixon/sidekiq-unique-jobs/security/advisories/GHSA-cmh9-rx85-xj38
https://link.org
https://www.link.com
https://www.mgm-sp.com/cve/sidekiq-unique-jobs-reflected-xss-cve-2023-46950-cve-2023-46951

Vulnerability Database

CVE-2023-46950