Skip to content
OpenAdvisories

Vendor

thoughtbot

2 known vulnerabilities.

Products

paperclip ruby gem 1 administrate 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2020-5257

    Sort order SQL injection in Administrate

    In Administrate (rubygem) before version 0.13.0, when sorting by attributes on a dashboard, the direction parameter was not validated before being interpolated into the SQL query. This could present a SQL injection if the attacker were able to modify the `dir…

    thoughtbot administrate administrate RubyGems