rails_admin 1.2.0
2 security vulnerabilities
found in version
1.2.0
rails_admin ruby gem XSS vulnerability
medium severity CVE-2020-36190
medium severity
CVE-2020-36190
Patched versions:
~> 1.4.3, >= 2.0.2
RailsAdmin (aka rails_admin) before 1.4.3 and 2.x before 2.0.2 allows XSS via nested forms.
rails_admin ruby gem XSS vulnerability
medium severity CVE-2017-12098
medium severity
CVE-2017-12098
Patched versions:
>= 1.3.0
An exploitable cross site scripting (XSS) vulnerability exists in the add filter functionality of the rails_admin rails gem version 1.2.0. A specially crafted URL can cause an XSS flaw resulting in an attacker being able to execute arbitrary javascript on the victim's browser. An attacker can phish an authenticated user to trigger this vulnerability.
No officially reported memory leakage issues detected.
This gem version does not have any officially reported memory leaked issues.
No license issues detected.
This gem version has a license in the gemspec.
This gem version is available.
This gem version has not been yanked and is still available for usage.