{"action":"Upgrade activeadmin to 3.2.0 or later.","affected":[{"fixed":"3.2.0","introduced":"0"}],"component":"activeadmin","cve_ids":["CVE-2023-51763"],"ecosystem":"RubyGems","epss":0.00942,"exploited":false,"fixed_versions":["3.2.0"],"ghsa_id":"GHSA-xhvv-3jww-c487","id":"tcs_01M5KEP98VF0AVNPZC6YNDSD6Z","modified_at":"2024-02-16T07:59:26.143251Z","published_at":"2023-12-28T18:45:30Z","references":["https://osv.dev/vulnerability/GHSA-xhvv-3jww-c487","https://github.com/activeadmin/activeadmin/security/advisories/GHSA-xhvv-3jww-c487","https://nvd.nist.gov/vuln/detail/CVE-2023-51763","https://github.com/activeadmin/activeadmin/pull/8167","https://github.com/activeadmin/activeadmin/commit/7af735cf657c73734fca1900cd6a5adac4ee706e","https://github.com/activeadmin/activeadmin","https://github.com/activeadmin/activeadmin/releases/tag/v3.2.0","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activeadmin/CVE-2023-51763.yml"],"severity":{"label":"medium","score":5.2},"sources":[{"source":"osv","source_id":"GHSA-xhvv-3jww-c487","url":"https://osv.dev/vulnerability/GHSA-xhvv-3jww-c487"}],"summary":"ActiveAdmin CSV Injection leading to sensitive information disclosure"}