Thoughtbot Administrate
2 CVEs affecting Thoughtbot Administrate. Latest disclosed: 2022-08-05. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-5257 | High | 7.7 | 2020-03-13 | In Administrate (rubygem) before version 0.13.0, when sorting by attributes on a dashboard, the direction parameter was not validated before being interpolated… |
CVE-2016-3098 | Medium | 5.4 | 2022-08-05 | Cross-site request forgery (CSRF) vulnerability in administrate 0.1.4 and earlier allows remote attackers to hijack the user's OAuth autorization code. |