From ac5000247567c76d8379903a78e3d93c96b37d11 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Tue, 5 Sep 2023 21:04:57 +0000 Subject: [PATCH] Publish GHSA-h5g2-38x9-4gv3 --- .../GHSA-h5g2-38x9-4gv3/GHSA-h5g2-38x9-4gv3.json | 14 ++++++++++++-- 1 file changed, 12 insertions(+), 2 deletions(-) diff --git a/advisories/github-reviewed/2017/10/GHSA-h5g2-38x9-4gv3/GHSA-h5g2-38x9-4gv3.json b/advisories/github-reviewed/2017/10/GHSA-h5g2-38x9-4gv3/GHSA-h5g2-38x9-4gv3.json index 2ffc6ed01c0..873ff223e0d 100644 --- a/advisories/github-reviewed/2017/10/GHSA-h5g2-38x9-4gv3/GHSA-h5g2-38x9-4gv3.json +++ b/advisories/github-reviewed/2017/10/GHSA-h5g2-38x9-4gv3/GHSA-h5g2-38x9-4gv3.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-h5g2-38x9-4gv3", - "modified": "2023-01-23T17:33:09Z", + "modified": "2023-09-05T21:02:41Z", "published": "2017-10-24T18:33:35Z", "aliases": [ "CVE-2016-10173" ], "summary": "archive-tar-minitar and minitar vulnerable to Path Traversal", - "details": "Directory traversal vulnerability in the minitar before 0.6 and archive-tar-minitar 0.5.2 gems for Ruby allows remote attackers to write to arbitrary files via a .. (dot dot) in a TAR archive entry.", + "details": "Directory traversal vulnerability in the minitar before 0.6 and archive-tar-minitar 0.5.2 gems for Ruby allows remote attackers to write to arbitrary files via a `..` (dot dot) in a TAR archive entry.", "severity": [ { "type": "CVSS_V3", @@ -20,6 +20,11 @@ "ecosystem": "RubyGems", "name": "archive-tar-minitar" }, + "ecosystem_specific": { + "affected_functions": [ + "" + ] + }, "ranges": [ { "type": "ECOSYSTEM", @@ -39,6 +44,11 @@ "ecosystem": "RubyGems", "name": "minitar" }, + "ecosystem_specific": { + "affected_functions": [ + "" + ] + }, "ranges": [ { "type": "ECOSYSTEM",