Bug 2467747 (CVE-2025-67202) - CVE-2025-67202 sidekiq-cron: Sidekiq-cron: Cross-site scripting vulnerability via crafted URL
Summary: CVE-2025-67202 sidekiq-cron: Sidekiq-cron: Cross-site scripting vulnerability...
Keywords:
Status: NEW
Alias: CVE-2025-67202
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-05-07 15:01 UTC by OSIDB Bzimport
Modified: 2026-05-18 14:17 UTC (History)
6 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-05-07 15:01:37 UTC 
Sidekiq-cron thru 2.3.1, an open-source scheduling add-on for Sidekiq, is vulnerable to a cross-site scripting (xss) vulnerability via crafted URL being rended from cron.erb.
Note You need to log in before you can comment on or make changes to this bug.