← Database

CVE-2024-39308

MEDIUM CVSS: 5.4 Published: 2024-07-08 Modified: 2026-06-17

Description

RailsAdmin is a Rails engine that provides an interface for managing data. RailsAdmin list view has the XSS vulnerability, caused by improperly-escaped HTML title attribute. Upgrade to 3.1.3 or 2.2.2 (to be released).

Affected Platforms

Rails Admin Project Rails Admin

Weakness Type

CWE-79, CWE-79

References