From 3f2c41d13e23267e29ac545a6d9619e693262e64 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Tue, 5 Sep 2023 21:07:04 +0000
Subject: [PATCH] Publish GHSA-pr3h-jjhj-573x

---
 .../GHSA-pr3h-jjhj-573x.json                  | 19 +++++++++++++++++--
 1 file changed, 17 insertions(+), 2 deletions(-)

diff --git a/advisories/github-reviewed/2018/06/GHSA-pr3h-jjhj-573x/GHSA-pr3h-jjhj-573x.json b/advisories/github-reviewed/2018/06/GHSA-pr3h-jjhj-573x/GHSA-pr3h-jjhj-573x.json
index 4ea35f8041c..ef904f36088 100644
--- a/advisories/github-reviewed/2018/06/GHSA-pr3h-jjhj-573x/GHSA-pr3h-jjhj-573x.json
+++ b/advisories/github-reviewed/2018/06/GHSA-pr3h-jjhj-573x/GHSA-pr3h-jjhj-573x.json
@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-pr3h-jjhj-573x",
-  "modified": "2022-07-29T19:53:42Z",
+  "modified": "2023-09-05T21:05:18Z",
   "published": "2018-06-20T22:18:58Z",
   "aliases": [
     "CVE-2018-3760"
   ],
   "summary": "Sprockets path traversal leads to information leak",
-  "details": "Specially crafted requests can be used to access files that exist on the filesystem that is outside an application's root directory, when the Sprockets server is used in production.\n  \nAll users running an affected release should either upgrade or use one of the work arounds immediately.\n  \nWorkaround:\n  \nIn Rails applications, work around this issue, set `config.assets.compile = false` and `config.public_file_server.enabled = true` in an initializer and precompile the assets.\n\nThis work around will not be possible in all hosting environments and upgrading is advised.",
+  "details": "Specially crafted requests can be used to access files that exist on the filesystem that is outside an application's root directory, when the Sprockets server is used in production.\n  \nAll users running an affected release should either upgrade or use one of the work arounds immediately.\n  \n### Workaround:\n  \nIn Rails applications, work around this issue, set `config.assets.compile = false` and `config.public_file_server.enabled = true` in an initializer and precompile the assets.\n\nThis work around will not be possible in all hosting environments and upgrading is advised.",
   "severity": [
     {
       "type": "CVSS_V3",
@@ -20,6 +20,11 @@
         "ecosystem": "RubyGems",
         "name": "sprockets"
       },
+      "ecosystem_specific": {
+        "affected_functions": [
+          ""
+        ]
+      },
       "ranges": [
         {
           "type": "ECOSYSTEM",
@@ -39,6 +44,11 @@
         "ecosystem": "RubyGems",
         "name": "sprockets"
       },
+      "ecosystem_specific": {
+        "affected_functions": [
+          ""
+        ]
+      },
       "ranges": [
         {
           "type": "ECOSYSTEM",
@@ -61,6 +71,11 @@
         "ecosystem": "RubyGems",
         "name": "sprockets"
       },
+      "ecosystem_specific": {
+        "affected_functions": [
+          ""
+        ]
+      },
       "ranges": [
         {
           "type": "ECOSYSTEM",