Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2022-23837

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-jrfj-98qg-qjgv

Denial of service in sidekiq In `api.rb` in Sidekiq before 6.4.0 and 5.2.10, there is no limit on the number of days when requesting stats for the graph. This overloads the system, affecting the Web UI, and makes it unavailable to users.

gitlab/gem/sidekiq/CVE-2022-23837

Allocation of Resources Without Limits or Throttling In api.rb in Sidekiq, there is no limit on the number of days when requesting stats for the graph. This overloads the system, affecting the Web UI, and makes it unavailable to users.