Rails Admin Project

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Rails Admin Project records in CISA KEV

No Rails Admin Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Rails Admin · all components

TI-2016-08564 CVE-2016-10522 · GHSA-pxqr-8v54-m2hj

MEDIUM 40

rails_admin ruby gem <v1.1.1 is vulnerable to cross-site request forgery (CSRF) attacks.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00983 Published 2018-07-05 Fixed in 1.1.1 CWE-352

TI-2020-18510 CVE-2020-36190 · GHSA-wjx2-7hqq-8h7m

LOW 30

RailsAdmin (aka rails_admin) before 1.4.3 and 2.x before 2.0.2 allows XSS via nested forms.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01294 Published 2021-01-12 Fixed in 1.4.3, 2.0.2 CWE-79

TI-2017-08891 CVE-2017-12098 · GHSA-pxr8-w3jq-rcwj

LOW 30

An exploitable cross site scripting (XSS) vulnerability exists in the add filter functionality of the rails_admin rails gem version 1.2.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01279 Published 2018-01-19 Fixed in 1.3.0 CWE-79

TI-2024-26264 CVE-2024-39308 · GHSA-8qgm-g2vv-vwvc

LOW 25

RailsAdmin is a Rails engine that provides an interface for managing data.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00579 Published 2024-07-08 Fixed in 3.1.3, 2.3.0 CWE-79