CVE-2023-51763: ActiveAdmin vulnerable to CSV injection

December 24, 2023 (updated December 27, 2023)

csv_builder.rb in ActiveAdmin (aka Active Admin) before 3.2.0 allows CSV injection.

References

github.com/activeadmin/activeadmin/commit/697be2b183491beadc8f0b7d8b5bfb44f2387909
github.com/activeadmin/activeadmin/pull/8161
github.com/activeadmin/activeadmin/releases/tag/v3.2.0
github.com/advisories/GHSA-rqxc-9p8h-xqgq
nvd.nist.gov/vuln/detail/CVE-2023-51763

Code Behaviors & Features

Detect and mitigate CVE-2023-51763 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →