{"action":"Upgrade administrate to 0.13.0 or later.","affected":[{"fixed":"0.13.0","introduced":"0"}],"component":"administrate","cve_ids":["CVE-2020-5257"],"ecosystem":"RubyGems","epss":0.009,"exploited":false,"fixed_versions":["0.13.0"],"ghsa_id":"GHSA-2p5p-m353-833w","id":"tcs_01M5KEFZAH76MS0RCJ5X8BGYYM","modified_at":"2026-07-08T06:28:12.832132300Z","published_at":"2020-03-13T21:05:44Z","references":["https://osv.dev/vulnerability/GHSA-2p5p-m353-833w","https://github.com/thoughtbot/administrate/security/advisories/GHSA-2p5p-m353-833w","https://nvd.nist.gov/vuln/detail/CVE-2020-5257","https://github.com/thoughtbot/administrate/commit/3ab838b83c5f565fba50e0c6f66fe4517f98eed3","https://github.com/advisories/GHSA-2p5p-m353-833w","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/administrate/CVE-2020-5257.yml"],"severity":{"label":"high","score":7.7},"sources":[{"source":"osv","source_id":"GHSA-2p5p-m353-833w","url":"https://osv.dev/vulnerability/GHSA-2p5p-m353-833w"}],"summary":"Sort order SQL injection in Administrate"}