RubyGems/activeadmin CVE-2023-51763: medium 5.2, EPSS 0.94%

ActiveAdmin CSV Injection leading to sensitive information disclosure

Action: Upgrade activeadmin to 3.2.0 or later.

bundle update activeadmin

Affected

Fixed versions

Sources

• osv: GHSA-xhvv-3jww-c487
• https://github.com/activeadmin/activeadmin/security/advisories/GHSA-xhvv-3jww-c487
• https://nvd.nist.gov/vuln/detail/CVE-2023-51763
• https://github.com/activeadmin/activeadmin/pull/8167
• https://github.com/activeadmin/activeadmin/commit/7af735cf657c73734fca1900cd6a5adac4ee706e
• https://github.com/activeadmin/activeadmin
• https://github.com/activeadmin/activeadmin/releases/tag/v3.2.0
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activeadmin/CVE-2023-51763.yml

CVE-2023-51763 · published 2023-12-28T18:45:30Z · modified 2024-02-16T07:59:26.143251Z · JSON