TI-2023-28392 CVE-2023-51763 · GHSA-xhvv-3jww-c487
csv_builder.rb in ActiveAdmin (aka Active Admin) before 3.2.0 allows CSV injection.
Priority MEDIUM 44
csv_builder.rb in ActiveAdmin (aka Active Admin) before 3.2.0 allows CSV injection.
Activeadmin
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Activeadmin records in CISA KEVNo Activeadmin vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records
TI-2023-27594 CVE-2023-50448 · GHSA-356j-hg45-x525
In ActiveAdmin (aka Active Admin) before 2.12.0, a concurrency issue allows a malicious…
Priority LOW 29
In ActiveAdmin (aka Active Admin) before 2.12.0, a concurrency issue allows a malicious actor to access potentially private data (that belongs to another user) by making CSV export requests at certain specific times.