Severity: Critical
CVSS Score: 5.2
csv_builder.rb in ActiveAdmin (aka Active Admin) before 3.2.0 allows CSV injection.