{"action":"Upgrade rails_admin to 3.1.3 or later.","affected":[{"fixed":"3.1.3","introduced":"3.0.0.beta"}],"component":"rails_admin","cve_ids":["CVE-2024-39308"],"ecosystem":"RubyGems","epss":0.00579,"exploited":false,"fixed_versions":["3.1.3"],"ghsa_id":"GHSA-8qgm-g2vv-vwvc","id":"tcs_01M5KEJ3R7TPJ00KC8K8MR3NYQ","modified_at":"2026-09-10T03:50:16.415683092Z","published_at":"2024-07-08T14:14:43Z","references":["https://osv.dev/vulnerability/GHSA-8qgm-g2vv-vwvc","https://github.com/railsadminteam/rails_admin/security/advisories/GHSA-8qgm-g2vv-vwvc","https://nvd.nist.gov/vuln/detail/CVE-2024-39308","https://github.com/railsadminteam/rails_admin/issues/3686","https://github.com/railsadminteam/rails_admin/commit/b5a287d82e2cbd1737a1a01e11ede2911cce7fef","https://github.com/railsadminteam/rails_admin/commit/d84b39884059c4ed50197cec8522cca029a17673","https://github.com/railsadminteam/rails_admin","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rails_admin/CVE-2024-39308.yml","https://rubygems.org/gems/rails_admin/versions/2.3.0","https://rubygems.org/gems/rails_admin/versions/3.1.3"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-8qgm-g2vv-vwvc","url":"https://osv.dev/vulnerability/GHSA-8qgm-g2vv-vwvc"}],"summary":"RailsAdmin Cross-site Scripting vulnerability in the list view"}