Duplicate Advisory: ActiveAdmin vulnerable to CSV injection
High severity
GitHub Reviewed
Published
Dec 24, 2023
to the GitHub Advisory Database
•
Updated Jan 3, 2024
Withdrawn
This advisory was withdrawn on Dec 28, 2023
Description
Published by the National Vulnerability Database
Dec 24, 2023
Published to the GitHub Advisory Database
Dec 24, 2023
Reviewed
Dec 27, 2023
Withdrawn
Dec 28, 2023
Last updated
Jan 3, 2024
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-xhvv-3jww-c487. This link is maintained to preserve external references.
Original Description
csv_builder.rb in ActiveAdmin (aka Active Admin) before 3.2.0 allows CSV injection.
References