CVE-2022-23837
Published Jan 21, 2022
Last updated 2 years ago
Overview
- Description
- In api.rb in Sidekiq before 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph. This overloads the system, affecting the Web UI, and makes it unavailable to users.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 7.5
- Impact score
- 3.6
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Severity
- HIGH
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
- nvd@nist.gov
- CWE-770
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:contribsys:sidekiq:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C6B15EF8-61E6-4DED-B338-1BAB5FA46E67",
"versionEndExcluding": "5.2.10"
},
{
"criteria": "cpe:2.3:a:contribsys:sidekiq:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8B68F3B1-8E41-4B23-9461-0DC222E0A92A",
"versionEndExcluding": "6.4.0",
"versionStartIncluding": "6.0.0"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DEECE5FC-CACF-4496-A3E7-164736409252"
}
],
"operator": "OR"
}
]
}
]