Medium · 6.1 CVE-2020-36190 EUVD-2021-0521GHSA-wjx2-7hqq-8h7m

rails_admin ruby gem XSS vulnerability

Published Jan 12, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

RailsAdmin (aka rails_admin) before 1.4.3 and 2.x before 2.0.2 allows XSS via nested forms.

Ecosystem	Package	Affected	Fixed	Record
RubyGems	rails_admin	< 1.4.3	1.4.3	GHSA-wjx2-7hqq-8h7m
RubyGems	rails_admin	>= 2.0.0, < 2.0.2	2.0.2	GHSA-wjx2-7hqq-8h7m