Vulnerabilities (CVE)

Filtered by vendor Activeadmin Subscribe
Filtered by product Activeadmin
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-50448 1 Activeadmin 1 Activeadmin 2024-01-04 N/A 6.5 MEDIUM
In ActiveAdmin (aka Active Admin) before 2.12.0, a concurrency issue allows a malicious actor to access potentially private data (that belongs to another user) by making CSV export requests at certain specific times.