Skip to content
OpenAdvisories

Package · RubyGems

activeadmin

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2024-37031

    activeadmin vulnerable to stored persistent cross-site scripting (XSS) in dynamic form legends

    The Active Admin (aka activeadmin) framework before 3.2.2 for Ruby on Rails allows stored XSS in certain situations where users can create entities (to be later edited in forms) with arbitrary names, aka a "dynamic form legends" issue. 4.0.0.beta7 is also a f…

    activeadmin RubyGems
  • Medium 5.2
    CVE-2023-51763

    ActiveAdmin CSV Injection leading to sensitive information disclosure

    csv_builder.rb in ActiveAdmin (aka Active Admin) before 3.2.0 allows CSV injection.

    activeadmin RubyGems