Activeadmin

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Activeadmin records in CISA KEV

No Activeadmin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Active Admin 1 record MEDIUM Activeadmin 1 record LOW

Records

1 record in Activeadmin · all components

TI-2023-27594 CVE-2023-50448 · GHSA-356j-hg45-x525

In ActiveAdmin (aka Active Admin) before 2.12.0, a concurrency issue allows a malicious…

LOW 29

In ActiveAdmin (aka Active Admin) before 2.12.0, a concurrency issue allows a malicious actor to access potentially private data (that belongs to another user) by making CSV export requests at certain specific times.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00496 Published 2023-12-28 Fixed in 2.12.0 CWE-1236

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0