Skip to content
OpenAdvisories

Package · RubyGems

rails_admin

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.8
    CVE-2024-39308

    RailsAdmin Cross-site Scripting vulnerability in the list view

    RailsAdmin is a Rails engine that provides an interface for managing data. RailsAdmin list view has the XSS vulnerability, caused by improperly-escaped HTML title attribute. Upgrade to 3.1.3 or 2.2.2 (to be released).

    railsadminteam rails_admin rails_admin ruby-rails-admin Ubuntu RubyGems
  • Medium 6.1
    CVE-2020-36190

    rails_admin ruby gem XSS vulnerability

    RailsAdmin (aka rails_admin) before 1.4.3 and 2.x before 2.0.2 allows XSS via nested forms.

    rails_admin RubyGems
  • Medium 6.1
    CVE-2017-12098

    rails_admin ruby gem XSS

    An exploitable cross site scripting (XSS) vulnerability exists in the add filter functionality of the rails_admin rails gem version 1.2.0. A specially crafted URL can cause an XSS flaw resulting in an attacker being able to execute arbitrary javascript on the…

    rails_admin ruby-rails-admin Ubuntu RubyGems