netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish GHSA-x27v-x225-gq8g

Browse Source
This commit is contained in:
advisory-database[bot]
2023-08-29 15:40:01 +00:00
parent 289a138935
commit 8690931655
1 changed files with 66 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2017/12/GHSA-x27v-x225-gq8g/GHSA-x27v-x225-gq8g.json
+66 -2
View File
@@ -1,12 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-x27v-x225-gq8g",
"modified": "2023-01-26T22:22:17Z",
"modified": "2023-08-29T15:38:45Z",
"published": "2017-12-06T16:43:00Z",
"aliases": [
"CVE-2017-0905"
],
"summary": "Server-Side Request Forgery in Recurly",
"summary": "Recurly gem Server-Side Request Forgery in Resource#find method",
"details": "The Recurly Client Ruby Library before 2.0.13, 2.1.11, 2.2.5, 2.3.10, 2.4.11, 2.5.4, 2.6.3, 2.7.8, 2.8.2, 2.9.2, 2.10.4, 2.11.3 is vulnerable to a Server-Side Request Forgery vulnerability in the `Resource#find` method that could result in compromise of API keys or other critical resources.",
"severity": [
{
@@ -20,6 +20,11 @@
"ecosystem": "RubyGems",
"name": "recurly"
},
"ecosystem_specific": {
"affected_functions": [
""
]
},
"ranges": [
{
"type": "ECOSYSTEM",
@@ -39,6 +44,11 @@
"ecosystem": "RubyGems",
"name": "recurly"
},
"ecosystem_specific": {
"affected_functions": [
""
]
},
"ranges": [
{
"type": "ECOSYSTEM",
@@ -58,6 +68,11 @@
"ecosystem": "RubyGems",
"name": "recurly"
},
"ecosystem_specific": {
"affected_functions": [
""
]
},
"ranges": [
{
"type": "ECOSYSTEM",
@@ -77,6 +92,11 @@
"ecosystem": "RubyGems",
"name": "recurly"
},
"ecosystem_specific": {
"affected_functions": [
""
]
},
"ranges": [
{
"type": "ECOSYSTEM",
@@ -96,6 +116,11 @@
"ecosystem": "RubyGems",
"name": "recurly"
},
"ecosystem_specific": {
"affected_functions": [
""
]
},
"ranges": [
{
"type": "ECOSYSTEM",
@@ -115,6 +140,11 @@
"ecosystem": "RubyGems",
"name": "recurly"
},
"ecosystem_specific": {
"affected_functions": [
""
]
},
"ranges": [
{
"type": "ECOSYSTEM",
@@ -134,6 +164,11 @@
"ecosystem": "RubyGems",
"name": "recurly"
},
"ecosystem_specific": {
"affected_functions": [
""
]
},
"ranges": [
{
"type": "ECOSYSTEM",
@@ -153,6 +188,11 @@
"ecosystem": "RubyGems",
"name": "recurly"
},
"ecosystem_specific": {
"affected_functions": [
""
]
},
"ranges": [
{
"type": "ECOSYSTEM",
@@ -172,6 +212,11 @@
"ecosystem": "RubyGems",
"name": "recurly"
},
"ecosystem_specific": {
"affected_functions": [
""
]
},
"ranges": [
{
"type": "ECOSYSTEM",
@@ -191,6 +236,11 @@
"ecosystem": "RubyGems",
"name": "recurly"
},
"ecosystem_specific": {
"affected_functions": [
""
]
},
"ranges": [
{
"type": "ECOSYSTEM",
@@ -210,6 +260,11 @@
"ecosystem": "RubyGems",
"name": "recurly"
},
"ecosystem_specific": {
"affected_functions": [
""
]
},
"ranges": [
{
"type": "ECOSYSTEM",
@@ -229,6 +284,11 @@
"ecosystem": "RubyGems",
"name": "recurly"
},
"ecosystem_specific": {
"affected_functions": [
""
]
},
"ranges": [
{
"type": "ECOSYSTEM",
@@ -260,6 +320,10 @@
{
"type": "PACKAGE",
"url": "https://github.com/recurly/recurly-client-ruby"
},
{
"type": "WEB",
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/recurly/CVE-2017-0905.yml"
}
],
"database_specific": {