Skip to content
OpenAdvisories

Package · Ubuntu

ruby-rails-admin

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 6.8
    CVE-2024-39308

    RailsAdmin Cross-site Scripting vulnerability in the list view

    RailsAdmin is a Rails engine that provides an interface for managing data. RailsAdmin list view has the XSS vulnerability, caused by improperly-escaped HTML title attribute. Upgrade to 3.1.3 or 2.2.2 (to be released).

    railsadminteam rails_admin rails_admin ruby-rails-admin Ubuntu RubyGems
  • High 8.8
    CVE-2016-10522

    Cross-site request forgery in rails_admin

    rails_admin ruby gem <v1.1.1 is vulnerable to cross-site request forgery (CSRF) attacks. Non-GET methods were not validating CSRF tokens and, as a result, an attacker could hypothetically gain access to the application administrative endpoints exposed by the …

    https://github.com/sferik rails_admin ruby gem rails_admin ruby-rails-admin Ubuntu RubyGems
  • Medium 6.1
    CVE-2017-12098

    rails_admin ruby gem XSS

    An exploitable cross site scripting (XSS) vulnerability exists in the add filter functionality of the rails_admin rails gem version 1.2.0. A specially crafted URL can cause an XSS flaw resulting in an attacker being able to execute arbitrary javascript on the…

    rails_admin ruby-rails-admin Ubuntu RubyGems