Vendor archive

activeadmin CVEs

Beta · best-effort

2 CVEs tagged to vendor activeadmin — 1 Critical, 0 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2023-50448

Published Dec 28, 2023

In ActiveAdmin (aka Active Admin) before 2.12.0, a concurrency issue allows a malicious actor to access potentially private data (that belongs to another user) by making CSV expor…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2023-51763

Published Dec 24, 2023

csv_builder.rb in ActiveAdmin (aka Active Admin) before 3.2.0 allows CSV injection.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1