IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-05-07 15:16

MODIFIED

2026-05-07 15:53

EPSS (Prob. Exploit)

0.19%

Top 91.4%

DATA SOURCES:

NVD 🔗 2026-05-07 FIRST EPSS 🔗 2026-10-25 GITHUB 🔗 2026-11-05 OSV 🔗 2026-07-26

> DESCRIPTION

Sidekiq-cron thru 2.3.1, an open-source scheduling add-on for Sidekiq, is vulnerable to a cross-site scripting (xss) vulnerability via crafted URL being rended from cron.erb.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-xv9c-mjw8-79gf MODERATE

Sidekiq-cron is vulnerable to a cross-site scripting (xss) vulnerability via crafted URL

AFFECTED PACKAGES:

RUBYGEMS / sidekiq-cron

< 2.4.0

Fixed in: 2.4.0

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

AFFECTED PACKAGES:

Unknown / Unknown

51 versions affected

ALIASES:

GHSA-xv9c-mjw8-79gf

> HISTORIQUE DES MODIFICATIONS

Première apparition

07/05/2026 15:16

Source: NVD

Total des modifications: 0 Dernière mise à jour: 6 months ago

> REFERENCES

https://github.com/sidekiq-cron/sidekiq-cron/issues/569

https://github.com/sidekiq-cron/sidekiq-cron/releases/tag/v2.4.0