diff --git a/advisories/github-reviewed/2017/12/GHSA-gj4p-3wh3-2rmf/GHSA-gj4p-3wh3-2rmf.json b/advisories/github-reviewed/2017/12/GHSA-gj4p-3wh3-2rmf/GHSA-gj4p-3wh3-2rmf.json index 7633ee4e710..dd1040e13de 100644 --- a/advisories/github-reviewed/2017/12/GHSA-gj4p-3wh3-2rmf/GHSA-gj4p-3wh3-2rmf.json +++ b/advisories/github-reviewed/2017/12/GHSA-gj4p-3wh3-2rmf/GHSA-gj4p-3wh3-2rmf.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-gj4p-3wh3-2rmf", - "modified": "2023-06-09T20:11:56Z", + "modified": "2023-07-05T17:53:08Z", "published": "2017-12-21T00:47:25Z", "aliases": [ "CVE-2017-17042" ], "summary": "Arbitrary file read vulnerability in yard server", - "details": "lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to conduct directory traversal attacks and read arbitrary files.", + "details": "`lib/yard/core_ext/file.rb` in the server in YARD before 0.9.11 does not block relative paths with an initial `../` sequence, which allows attackers to conduct directory traversal attacks and read arbitrary files.", "severity": [ { "type": "CVSS_V3",