A vulnerability, which was classified as problematic, was found in Sidekiq up to 6.3.x. This affects an unknown part of the file api.rb of the component Web UI. The manipulation results in resource consumption.
This vulnerability is cataloged as CVE-2022-23837. The attack must originate from the local network. There is no exploit available.
You should upgrade the affected component.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2022-23837 | Sidekiq up to 6.3.x Web UI api.rb resource consumption (EUVD-2022-0634)
A vulnerability, which was classified as problematic, was found in Sidekiq up to 6.3.x. This affects an unknown part of the file api.rb of the component Web…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Compliance, SLA & Vendor Adherence
Advisory-Prüfung · Score-Einordnung · Fristen
Advisory Radar
Offizielles Hersteller-Update verfügbar
Hersteller-Sicherheitsmeldungen & Patch-Status
Handlungsempfehlung für Administratoren
Hersteller hat ein verifiziertes Patch-Release herausgegeben. Sofortiges Rollout auf Test- und Produktivsystemen empfohlen.
Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):
-
Upstream-Referenz (Code-Hosting, kein Advisory)github.com
-
Upstream-Referenz (Code-Hosting, kein Advisory)github.com
-
Upstream-Referenz (Code-Hosting, kein Advisory)github.com
-
Debian Security Tracker Verifiziertdebian.org
-
Debian Security Tracker Verifiziertdebian.org