CVE-2020-7981

The CVE-2020-7981 issue affects Geocoder (Geocoder gem) and is caused by a Boolean-based SQL injection in sql.rb prior to version 1.6.1 when within_bounding_box is used with untrusted sw_lat, sw_lng, ne_lat, or ne_lng data. Concretely, vulnerable in Geocoder up to 1.6.0; update to 1.6.1 or newer ...

PT-2020-19896

Name of the Vulnerable Software and Affected Versions Geocoder versions prior to 1.6.1 Description The issue allows Boolean-based SQL injection when the within bounding box function is used with untrusted sw lat, sw lng, ne lat, or ne lng data. This can occur in the sql.rb file of the Geocoder...

CVE-2020-7981: Improper Neutralization of Special Elements used in an SQL Command

sql.rb in Geocoder before 1.6.1 allows Boolean-based SQL injection when withinboundingbox is used in conjunction with untrusted swlat, swlng, nelat, or nelng data...

Geocoder gem for Ruby contains possible SQL injection vulnerability

sql.rb in Geocoder allows Boolean-based SQL injection when withinboundingbox is used in conjunction with untrusted swlat, swlng, nelat, or nelng data...