From 869093165597ffa079862df94df86ae10133829e Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Tue, 29 Aug 2023 15:40:01 +0000
Subject: [PATCH] Publish GHSA-x27v-x225-gq8g

---
 .../GHSA-x27v-x225-gq8g.json                  | 68 ++++++++++++++++++-
 1 file changed, 66 insertions(+), 2 deletions(-)

diff --git a/advisories/github-reviewed/2017/12/GHSA-x27v-x225-gq8g/GHSA-x27v-x225-gq8g.json b/advisories/github-reviewed/2017/12/GHSA-x27v-x225-gq8g/GHSA-x27v-x225-gq8g.json
index dbf7b6aee6e..10bf949da7a 100644
--- a/advisories/github-reviewed/2017/12/GHSA-x27v-x225-gq8g/GHSA-x27v-x225-gq8g.json
+++ b/advisories/github-reviewed/2017/12/GHSA-x27v-x225-gq8g/GHSA-x27v-x225-gq8g.json
@@ -1,12 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-x27v-x225-gq8g",
-  "modified": "2023-01-26T22:22:17Z",
+  "modified": "2023-08-29T15:38:45Z",
   "published": "2017-12-06T16:43:00Z",
   "aliases": [
     "CVE-2017-0905"
   ],
-  "summary": "Server-Side Request Forgery in Recurly",
+  "summary": "Recurly gem Server-Side Request Forgery in Resource#find method",
   "details": "The Recurly Client Ruby Library before 2.0.13, 2.1.11, 2.2.5, 2.3.10, 2.4.11, 2.5.4, 2.6.3, 2.7.8, 2.8.2, 2.9.2, 2.10.4, 2.11.3 is vulnerable to a Server-Side Request Forgery vulnerability in the `Resource#find` method that could result in compromise of API keys or other critical resources.",
   "severity": [
     {
@@ -20,6 +20,11 @@
         "ecosystem": "RubyGems",
         "name": "recurly"
       },
+      "ecosystem_specific": {
+        "affected_functions": [
+          ""
+        ]
+      },
       "ranges": [
         {
           "type": "ECOSYSTEM",
@@ -39,6 +44,11 @@
         "ecosystem": "RubyGems",
         "name": "recurly"
       },
+      "ecosystem_specific": {
+        "affected_functions": [
+          ""
+        ]
+      },
       "ranges": [
         {
           "type": "ECOSYSTEM",
@@ -58,6 +68,11 @@
         "ecosystem": "RubyGems",
         "name": "recurly"
       },
+      "ecosystem_specific": {
+        "affected_functions": [
+          ""
+        ]
+      },
       "ranges": [
         {
           "type": "ECOSYSTEM",
@@ -77,6 +92,11 @@
         "ecosystem": "RubyGems",
         "name": "recurly"
       },
+      "ecosystem_specific": {
+        "affected_functions": [
+          ""
+        ]
+      },
       "ranges": [
         {
           "type": "ECOSYSTEM",
@@ -96,6 +116,11 @@
         "ecosystem": "RubyGems",
         "name": "recurly"
       },
+      "ecosystem_specific": {
+        "affected_functions": [
+          ""
+        ]
+      },
       "ranges": [
         {
           "type": "ECOSYSTEM",
@@ -115,6 +140,11 @@
         "ecosystem": "RubyGems",
         "name": "recurly"
       },
+      "ecosystem_specific": {
+        "affected_functions": [
+          ""
+        ]
+      },
       "ranges": [
         {
           "type": "ECOSYSTEM",
@@ -134,6 +164,11 @@
         "ecosystem": "RubyGems",
         "name": "recurly"
       },
+      "ecosystem_specific": {
+        "affected_functions": [
+          ""
+        ]
+      },
       "ranges": [
         {
           "type": "ECOSYSTEM",
@@ -153,6 +188,11 @@
         "ecosystem": "RubyGems",
         "name": "recurly"
       },
+      "ecosystem_specific": {
+        "affected_functions": [
+          ""
+        ]
+      },
       "ranges": [
         {
           "type": "ECOSYSTEM",
@@ -172,6 +212,11 @@
         "ecosystem": "RubyGems",
         "name": "recurly"
       },
+      "ecosystem_specific": {
+        "affected_functions": [
+          ""
+        ]
+      },
       "ranges": [
         {
           "type": "ECOSYSTEM",
@@ -191,6 +236,11 @@
         "ecosystem": "RubyGems",
         "name": "recurly"
       },
+      "ecosystem_specific": {
+        "affected_functions": [
+          ""
+        ]
+      },
       "ranges": [
         {
           "type": "ECOSYSTEM",
@@ -210,6 +260,11 @@
         "ecosystem": "RubyGems",
         "name": "recurly"
       },
+      "ecosystem_specific": {
+        "affected_functions": [
+          ""
+        ]
+      },
       "ranges": [
         {
           "type": "ECOSYSTEM",
@@ -229,6 +284,11 @@
         "ecosystem": "RubyGems",
         "name": "recurly"
       },
+      "ecosystem_specific": {
+        "affected_functions": [
+          ""
+        ]
+      },
       "ranges": [
         {
           "type": "ECOSYSTEM",
@@ -260,6 +320,10 @@
     {
       "type": "PACKAGE",
       "url": "https://github.com/recurly/recurly-client-ruby"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/recurly/CVE-2017-0905.yml"
     }
   ],
   "database_specific": {