CVE-2023-46951

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-46951
Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted payload to the uniquejobs function.
CVSS

No CVSS.

References
Link Resource
https://github.com/mhenrixon/sidekiq-unique-jobs/pull/829 Issue Tracking
https://github.com/mhenrixon/sidekiq-unique-jobs/releases/tag/v8.0.7 Release Notes
https://github.com/mhenrixon/sidekiq-unique-jobs/security/advisories/GHSA-cmh9-rx85-xj38 Exploit Vendor Advisory
https://github.com/mhenrixon/sidekiq-unique-jobs/security/advisories/GHSA-cmh9-rx85-xj38 Exploit Vendor Advisory
https://link.org Permissions Required
https://link.org Permissions Required
https://www.link.com Not Applicable
https://www.link.com Not Applicable
https://www.mgm-sp.com/cve/sidekiq-unique-jobs-reflected-xss-cve-2023-46950-cve-2023-46951 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:contribsys:sidekiq:6.5.8:*:*:*:*:*:*:*
History

18 Apr 2025, 14:29

Type Values Removed Values Added
References () https://github.com/mhenrixon/sidekiq-unique-jobs/pull/829 - () https://github.com/mhenrixon/sidekiq-unique-jobs/pull/829 - Issue Tracking
References () https://www.link.com - () https://www.link.com - Not Applicable
References () https://link.org - () https://link.org - Permissions Required
References () https://github.com/mhenrixon/sidekiq-unique-jobs/security/advisories/GHSA-cmh9-rx85-xj38 - () https://github.com/mhenrixon/sidekiq-unique-jobs/security/advisories/GHSA-cmh9-rx85-xj38 - Exploit, Vendor Advisory
References () https://www.mgm-sp.com/cve/sidekiq-unique-jobs-reflected-xss-cve-2023-46950-cve-2023-46951 - () https://www.mgm-sp.com/cve/sidekiq-unique-jobs-reflected-xss-cve-2023-46950-cve-2023-46951 - Third Party Advisory
References () https://github.com/mhenrixon/sidekiq-unique-jobs/releases/tag/v8.0.7 - () https://github.com/mhenrixon/sidekiq-unique-jobs/releases/tag/v8.0.7 - Release Notes
First Time Contribsys
Contribsys sidekiq
CPE cpe:2.3:a:contribsys:sidekiq:6.5.8:*:*:*:*:*:*:*

13 Sep 2024, 16:15

Type Values Removed Values Added
References
  • () https://github.com/mhenrixon/sidekiq-unique-jobs/pull/829 -
  • () https://www.mgm-sp.com/cve/sidekiq-unique-jobs-reflected-xss-cve-2023-46950-cve-2023-46951 -
  • () https://github.com/mhenrixon/sidekiq-unique-jobs/releases/tag/v8.0.7 -

01 Mar 2024, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-03-01 14:15

Updated : 2025-04-18 14:29

NVD link : CVE-2023-46951

Mitre link : CVE-2023-46951

JSON object : View

Products Affected

contribsys

  • sidekiq
CWE

No CWE.