CVE-2020-7981

The CVE-2020-7981 issue affects Geocoder (Geocoder gem) and is caused by a Boolean-based SQL injection in sql.rb prior to version 1.6.1 when within_bounding_box is used with untrusted sw_lat, sw_lng, ne_lat, or ne_lng data. Concretely, vulnerable in Geocoder up to 1.6.0; update to 1.6.1 or newer ...