Vulnerabilities > Rails Admin Project > Rails Admin > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-07-08 CVE-2024-39308 Cross-site Scripting vulnerability in Rails Admin Project Rails Admin
RailsAdmin is a Rails engine that provides an interface for managing data.
network
low complexity
rails-admin-project CWE-79
5.4
2021-01-12 CVE-2020-36190 Cross-site Scripting vulnerability in Rails Admin Project Rails Admin
RailsAdmin (aka rails_admin) before 1.4.3 and 2.x before 2.0.2 allows XSS via nested forms.
network
low complexity
rails-admin-project CWE-79
6.1
2018-01-19 CVE-2017-12098 Cross-site Scripting vulnerability in Rails Admin Project Rails Admin 1.2.0
An exploitable cross site scripting (XSS) vulnerability exists in the add filter functionality of the rails_admin rails gem version 1.2.0.
network
low complexity
rails-admin-project CWE-79
6.1