WS-2022-0304

The attack allows extracting sensitive properties of database objects that are associated with users or entries belonging to an account that the attacker has access to. Pageflow uses the "ActiveAdmin" Ruby library to provide some management features to its users. "ActiveAdmin" relies on the...