Information Disclosure

activeadmin is vulnerable to information disclosure attacks. The vulnerability exists via the format renderers. This is because the data can be rendered through other formats, even after disabling the download links due to insufficient authorization checks in the resourcecontroller...