CVE-2020-5257

CVE-2020-5257 describes a SQL injection vulnerability in Administrate (rubygem) versions prior to 0.13.0. The flaw arises from insufficient validation of the 'direction' parameter during dashboard sorting, allowing an authenticated attacker to inject malicious SQL. This vulnerability carries a high severity CVSS score of 8.1, indicating high impact on confidentiality and integrity, though exploitation requires access to Administrate dashboards, which are typically authenticated. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.