Activeadmin

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-50448 Dec 28, 23:15 Ruby MEDIUM PATCH This Month

In ActiveAdmin (aka Active Admin) before 2.12.0, a concurrency issue allows a malicious actor to access potentially private data (that belongs to another user) by making CSV export requests at. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Activeadmin

NVD GitHub

CVSS 3.1

6.5

EPSS

0.5%

CVE-2023-51763 Dec 24, 04:15 Ruby CRITICAL PATCH Act Now

csv_builder.rb in ActiveAdmin (aka Active Admin) before 3.2.0 allows CSV injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Code Injection Active Admin Activeadmin

NVD GitHub

CVSS 3.1

9.8

EPSS

0.9%

CVE-2023-50448 Ruby

EPSS 0% CVSS 6.5

MEDIUM PATCH This Month

Information Disclosure Activeadmin

NVD GitHub

CVE-2023-51763 Ruby

EPSS 1% CVSS 9.8

CRITICAL PATCH Act Now

Code Injection Active Admin Activeadmin

NVD GitHub