CVE-2023-50448

描述

### Impact In ActiveAdmin versions prior to 2.12.0, a concurrency issue was found that could allow a malicious actor to be able to access potentially private data that belongs to another user. The bug affects the functionality to export data as CSV files, and was caused by a variable holding the collection to be exported being shared across threads and not properly synchronized. The attacker would need access to the same ActiveAdmin application as the victim, and could exploit the issue by timing their request immediately before when they know someone else will request a CSV (e.g. via phishing) or request CSVs frequently and hope someone else makes a concurrent request. ### Patches Versions 2.12.0 and above fixed the problem by completely removing the shared state.

如何修補 CVE-2023-50448

要修補 CVE-2023-50448,請將受影響套件升級到下列已修補版本。

• —升級至 2.12.0 或更新版本

CVE-2023-50448 正在被利用嗎?

低 — EPSS 為 0.5%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• from 0, < 2.12.0

CVSS 分數

參考連結(5)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2023-50448
• PATCHgithub.com/activeadmin/activeadmin
• WEBgithub.com/activeadmin/activeadmin/pull/7336
• WEBgithub.com/activeadmin/activeadmin/security/advisories/GHSA-356j-hg45-x525