6.1

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-67202

CVE-2025-67202: Sidekiq-cron is vulnerable to a cross-site scripting (xss) vulnerability via crafted URL

Sidekiq-cron thru 2.3.1, an open-source scheduling add-on for Sidekiq, is vulnerable to a cross-site scripting (xss) vulnerability via crafted URL being rended from cron.erb.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-67202

CVE-2025-67202:

6.1

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
sidekiq-cron	rubygems	< 2.4.0	2.4.0

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is a reflected Cross-Site Scripting (XSS) issue in the Sidekiq-Cron web interface. The root cause is the improper handling of the namespace parameter from the URL. This parameter is assigned to the @current_namespace instance variable in a Sinatra route handler within lib/sidekiq/cron/web.rb. This un-sanitized variable is then directly rendered into the ERB templates lib/sidekiq/cron/views/cron.erb and lib/sidekiq/cron/views/legacy/cron.erb.

The patch addresses this by applying CGI.escapeHTML to the @current_namespace variable within the templates before it is rendered. This ensures that any malicious HTML or JavaScript provided in the URL is properly escaped and not executed by the browser.

During runtime, a profiler would show the rendering of these ERB templates as the point where the vulnerability is triggered. While the templates themselves are not functions, the process of rendering them involves executing embedded Ruby code. Therefore, the vulnerable 'function' is the rendering process of these specific templates when they are passed a malicious @current_namespace.

Vulnerable functions

render

lib/sidekiq/cron/views/cron.erb

The ERB template renders the `@current_namespace` variable without HTML escaping. An attacker can craft a URL with a malicious namespace, which will be rendered on the page, leading to a reflected Cross-Site Scripting (XSS) vulnerability. The `@current_namespace` variable is populated from the URL by the route handler in `lib/sidekiq/cron/web.rb`.

render

lib/sidekiq/cron/views/legacy/cron.erb

This is a legacy version of the `cron.erb` template and contains the same XSS vulnerability. The ERB template renders the `@current_namespace` variable without HTML escaping. An attacker can craft a URL with a malicious namespace, which will be rendered on the page, leading to a reflected Cross-Site Scripting (XSS) vulnerability. The `@current_namespace` variable is populated from the URL by the route handler in `lib/sidekiq/cron/web.rb`.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.