railsadminteam/rails_admin

railsadminteam/rails_admin

Releases74

Frequency2 months 2 days

Last Release over 1 year ago

Stars7.96K

RailsAdmin is a Rails engine that provides an easy-to-use interface for managing your data

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-39308 ↗	Jul 8, 2024Monday, 8 July 2024, 15:15	5.4 MEDIUM	—
RailsAdmin is a Rails engine that provides an interface for managing data. RailsAdmin list view has the XSS vulnerability, caused by improperly-escaped HTML title attribute. Upgrade to 3.1.3 or 2.2.2 (to be released).
CVE-2020-36190 ↗	Jan 12, 2021Tuesday, 12 January 2021, 20:15	6.1 MEDIUM	4.3 MEDIUM
RailsAdmin (aka rails_admin) before 1.4.3 and 2.x before 2.0.2 allows XSS via nested forms.
CVE-2016-10522 ↗	Jul 5, 2018Thursday, 5 July 2018, 16:29	—	6.8 MEDIUM
rails_admin ruby gem <v1.1.1 is vulnerable to cross-site request forgery (CSRF) attacks. Non-GET methods were not validating CSRF tokens and, as a result, an attacker could hypothetically gain access to the application administrative endpoints exposed by the gem.