CVE-2023-50448: Activeadmin

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

In ActiveAdmin (aka Active Admin) before 2.12.0, a concurrency issue allows a malicious actor to access potentially private data (that belongs to another user) by making CSV export requests at certain specific times.

Affected products

• Activeadmin Activeadmin: before 2.12.0 (fixed in 2.12.0)

Published 2023-12-28. Last modified 2026-06-17.