Vulnerabilities

TI-2024-26264 CVE-2024-39308 · GHSA-8qgm-g2vv-vwvc

RailsAdmin Cross-site Scripting vulnerability in the list view

LOW 25

RailsAdmin is a Rails engine that provides an interface for managing data.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00579 Published 2024-07-08 Fixed in 3.1.3, 2.3.0 CWE-79

TI-2020-18510 CVE-2020-36190 · GHSA-wjx2-7hqq-8h7m

LOW 30

RailsAdmin (aka rails_admin) before 1.4.3 and 2.x before 2.0.2 allows XSS via nested forms.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01294 Published 2021-01-12 Fixed in 1.4.3, 2.0.2 CWE-79

TI-2016-08564 CVE-2016-10522 · GHSA-pxqr-8v54-m2hj

MEDIUM 40

rails_admin ruby gem <v1.1.1 is vulnerable to cross-site request forgery (CSRF) attacks.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00983 Published 2018-07-05 Fixed in 1.1.1 CWE-352

TI-2017-08891 CVE-2017-12098 · GHSA-pxr8-w3jq-rcwj

LOW 30

An exploitable cross site scripting (XSS) vulnerability exists in the add filter functionality of the rails_admin rails gem version 1.2.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01279 Published 2018-01-19 Fixed in 1.3.0 CWE-79