CVE-2016-10522: Rails Admin Project Rails Admin

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

rails_admin ruby gem <v1.1.1 is vulnerable to cross-site request forgery (CSRF) attacks. Non-GET methods were not validating CSRF tokens and, as a result, an attacker could hypothetically gain access to the application administrative endpoints exposed by the gem.

Affected products

• Rails Admin Project Rails Admin: before 1.1.1 (fixed in 1.1.1)

Published 2018-07-05. Last modified 2026-06-17.