From 6e280e9cc6396774570b7a78dcdd47978694d97f Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Wed, 5 Jul 2023 17:54:23 +0000
Subject: [PATCH] Publish GHSA-gj4p-3wh3-2rmf

---
 .../2017/12/GHSA-gj4p-3wh3-2rmf/GHSA-gj4p-3wh3-2rmf.json      | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/advisories/github-reviewed/2017/12/GHSA-gj4p-3wh3-2rmf/GHSA-gj4p-3wh3-2rmf.json b/advisories/github-reviewed/2017/12/GHSA-gj4p-3wh3-2rmf/GHSA-gj4p-3wh3-2rmf.json
index 7633ee4e710..dd1040e13de 100644
--- a/advisories/github-reviewed/2017/12/GHSA-gj4p-3wh3-2rmf/GHSA-gj4p-3wh3-2rmf.json
+++ b/advisories/github-reviewed/2017/12/GHSA-gj4p-3wh3-2rmf/GHSA-gj4p-3wh3-2rmf.json
@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-gj4p-3wh3-2rmf",
-  "modified": "2023-06-09T20:11:56Z",
+  "modified": "2023-07-05T17:53:08Z",
   "published": "2017-12-21T00:47:25Z",
   "aliases": [
     "CVE-2017-17042"
   ],
   "summary": "Arbitrary file read vulnerability in yard server",
-  "details": "lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to conduct directory traversal attacks and read arbitrary files.",
+  "details": "`lib/yard/core_ext/file.rb` in the server in YARD before 0.9.11 does not block relative paths with an initial `../` sequence, which allows attackers to conduct directory traversal attacks and read arbitrary files.",
   "severity": [
     {
       "type": "CVSS_V3",