Skip to content
OpenAdvisories

Package · Ubuntu

ruby-rails-admin

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.8
    CVE-2024-39308

    RailsAdmin Cross-site Scripting vulnerability in the list view

    RailsAdmin is a Rails engine that provides an interface for managing data. RailsAdmin list view has the XSS vulnerability, caused by improperly-escaped HTML title attribute. Upgrade to 3.1.3 or 2.2.2 (to be released).

    railsadminteam rails_admin rails_admin ruby-rails-admin Ubuntu RubyGems
  • Medium 6.1
    CVE-2017-12098

    rails_admin ruby gem XSS

    An exploitable cross site scripting (XSS) vulnerability exists in the add filter functionality of the rails_admin rails gem version 1.2.0. A specially crafted URL can cause an XSS flaw resulting in an attacker being able to execute arbitrary javascript on the…

    rails_admin ruby-rails-admin Ubuntu RubyGems