Publish GHSA-xv7x-x6wr-xx7g

advisories/github-reviewed/2018/10/GHSA-xv7x-x6wr-xx7g/GHSA-xv7x-x6wr-xx7g.json

@@ -1,12 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-xv7x-x6wr-xx7g",
-  "modified": "2021-09-22T16:46:50Z",
+  "modified": "2023-11-21T11:56:13Z",
   "published": "2018-10-17T17:22:05Z",
   "aliases": [
     "CVE-2016-8746"
   ],
-  "summary": "Moderate severity vulnerability that affects org.apache.ranger:ranger",
+  "summary": "Apache Ranger policy engine incorrectly matches paths in certain conditions",
   "details": "Apache Ranger before 0.6.3 policy engine incorrectly matches paths in certain conditions when policy does not contain wildcards and has recursion flag set to true.",
   "severity": [
     {
@@ -18,7 +18,7 @@
     {
       "package": {
         "ecosystem": "Maven",
-        "name": "org.apache.ranger:ranger"
+        "name": "org.apache.ranger:ranger-plugins-common"
       },
       "ranges": [
         {
@@ -40,6 +40,10 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-8746"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/apache/ranger/commit/2fcd7f7cc175c0734443638b99c359e24c0f88ff"
+    },
     {
       "type": "WEB",
       "url": "https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger"