CVE-2020-5257

RubyGems/administrate CVE-2020-5257: high 7.7, EPSS 0.90%

Sort order SQL injection in Administrate

Action: Upgrade administrate to 0.13.0 or later.

bundle update administrate

Affected

Fixed versions

Sources

• osv: GHSA-2p5p-m353-833w
• https://github.com/thoughtbot/administrate/security/advisories/GHSA-2p5p-m353-833w
• https://nvd.nist.gov/vuln/detail/CVE-2020-5257
• https://github.com/thoughtbot/administrate/commit/3ab838b83c5f565fba50e0c6f66fe4517f98eed3
• https://github.com/advisories/GHSA-2p5p-m353-833w
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/administrate/CVE-2020-5257.yml

CVE-2020-5257 · published 2020-03-13T21:05:44Z · modified 2026-07-08T06:28:12.832132300Z · JSON