diff --git a/advisories/github-reviewed/2017/10/GHSA-hxx6-p24v-wg8c/GHSA-hxx6-p24v-wg8c.json b/advisories/github-reviewed/2017/10/GHSA-hxx6-p24v-wg8c/GHSA-hxx6-p24v-wg8c.json index a223a2c044c..27909530b23 100644 --- a/advisories/github-reviewed/2017/10/GHSA-hxx6-p24v-wg8c/GHSA-hxx6-p24v-wg8c.json +++ b/advisories/github-reviewed/2017/10/GHSA-hxx6-p24v-wg8c/GHSA-hxx6-p24v-wg8c.json @@ -1,12 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-hxx6-p24v-wg8c", - "modified": "2023-01-26T21:03:16Z", + "modified": "2023-08-29T10:57:50Z", "published": "2017-10-24T18:33:37Z", "aliases": [ "CVE-2013-2617" ], - "summary": "curl Code Injection vulnerability", + "summary": "Curl Gem insufficient URL escaping command injection", "details": "`lib/curl.rb` in the Curl Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.", "severity": [ @@ -17,6 +17,11 @@ "ecosystem": "RubyGems", "name": "curl" }, + "ecosystem_specific": { + "affected_functions": [ + "" + ] + }, "ranges": [ { "type": "ECOSYSTEM", @@ -37,6 +42,14 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2617" }, + { + "type": "WEB", + "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/curl/CVE-2013-2617.yml" + }, + { + "type": "PACKAGE", + "url": "https://github.com/tggo/curl" + }, { "type": "WEB", "url": "http://packetstormsecurity.com/files/120778/Ruby-Gem-Curl-Command-Execution.html"