RailsAdmin is a Rails engine that provides an interface for managing data. RailsAdmin list view has the XSS vulnerability, caused by improperly-escaped HTML title attribute. Upgrade to 3.1.3 or 2.2.2 (to be released).
References
Configurations
No configuration.
History
No history.
Information
Published : 2024-07-08 15:15
Updated : 2024-07-08 15:49
NVD link : CVE-2024-39308
Mitre link : CVE-2024-39308
CVE.ORG link : CVE-2024-39308
JSON object : View
Products Affected
No product.
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')