Publish GHSA-fh39-v733-mxfr

advisories/github-reviewed/2017/10/GHSA-fh39-v733-mxfr/GHSA-fh39-v733-mxfr.json

@@ -1,12 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-fh39-v733-mxfr",
-  "modified": "2020-06-16T21:34:40Z",
+  "modified": "2023-03-14T22:18:13Z",
   "published": "2017-10-24T18:33:38Z",
   "aliases": [
     "CVE-2012-2661"
   ],
-  "summary": "Moderate severity vulnerability that affects activerecord",
+  "summary": "Active Record vulnerable to SQL Injection via nested query parameters",
   "details": "The Active Record component in Ruby on Rails 3.0.x before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly implement the passing of request data to a where method in an ActiveRecord class, which allows remote attackers to conduct certain SQL injection attacks via nested query parameters that leverage unintended recursion, a related issue to CVE-2012-2695.",
   "severity": [
 
@@ -75,10 +75,6 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-2661"
     },
-    {
-      "type": "ADVISORY",
-      "url": "https://github.com/advisories/GHSA-fh39-v733-mxfr"
-    },
     {
       "type": "WEB",
       "url": "https://groups.google.com/group/rubyonrails-security/msg/fc2da6c627fc92df?dmode=source&output=gplain"