Publish GHSA-fhj9-cjjh-27vm

advisories/github-reviewed/2017/10/GHSA-fhj9-cjjh-27vm/GHSA-fhj9-cjjh-27vm.json

@@ -1,12 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-fhj9-cjjh-27vm",
-  "modified": "2021-12-02T22:36:50Z",
+  "modified": "2023-03-14T22:15:51Z",
   "published": "2017-10-24T18:33:37Z",
   "aliases": [
     "CVE-2013-0277"
   ],
-  "summary": "Critical severity vulnerability that affects activerecord",
+  "summary": "Active Record contains deserialization of arbitrary YAML",
   "details": "ActiveRecord in Ruby on Rails before 2.3.17 and 3.x before 3.1.0 allows remote attackers to cause a denial of service or execute arbitrary code via crafted serialized attributes that cause the +serialize+ helper to deserialize arbitrary YAML.",
   "severity": [
 
@@ -56,10 +56,6 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0277"
     },
-    {
-      "type": "ADVISORY",
-      "url": "https://github.com/advisories/GHSA-fhj9-cjjh-27vm"
-    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/rails/rails/tree/v6.1.4.1/activerecord"
@@ -68,10 +64,6 @@
       "type": "WEB",
       "url": "https://groups.google.com/group/rubyonrails-security/msg/302ec7ce90f13837?dmode=source&output=gplain"
     },
-    {
-      "type": "WEB",
-      "url": "https://puppet.com/security/cve/cve-2013-0277"
-    },
     {
       "type": "WEB",
       "url": "http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html"
@@ -80,14 +72,6 @@
       "type": "WEB",
       "url": "http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html"
     },
-    {
-      "type": "WEB",
-      "url": "http://secunia.com/advisories/52112"
-    },
-    {
-      "type": "WEB",
-      "url": "http://securitytracker.com/id?1028109"
-    },
     {
       "type": "WEB",
       "url": "http://support.apple.com/kb/HT5784"
@@ -103,10 +87,6 @@
     {
       "type": "WEB",
       "url": "http://www.openwall.com/lists/oss-security/2013/02/11/6"
-    },
-    {
-      "type": "WEB",
-      "url": "http://www.osvdb.org/90073"
     }
   ],
   "database_specific": {