CVE-2022-23837

In api.rb in Sidekiq before 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph

published January 21, 2022

CVSS
—
EPSS
5%
Percentile
92.5
In the wild
Unconfirmed
What it is

In api.rb in Sidekiq before 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph. This overloads the system, affecting the Web UI, and makes it unavailable to users.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05215 · 92.5th percentile
Published
2022-01-21T00:00Z
EPSS history
Timeline
  • 21 JAN 00:00Z
    In api.rb in Sidekiq before 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph
    cvelistv5