← Back

Activeadmin

activeadmin

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Active Admin
active_admin
1 CVE
Activeadmin
activeadmin
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-50448
1Activeadmin
1Activeadmin
Jun 17, 2026
Dec 28, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
In ActiveAdmin (aka Active Admin) before 2.12.0, a concurrency issue allows a malicious actor to access potentially private data (that belongs to another user) by making CSV export requests at certain specific times.
CVE-2023-51763
1Activeadmin
1Active Admin
Jun 17, 2026
Dec 24, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
csv_builder.rb in ActiveAdmin (aka Active Admin) before 3.2.0 allows CSV injection.