diff --git a/advisories/github-reviewed/2017/10/GHSA-fh39-v733-mxfr/GHSA-fh39-v733-mxfr.json b/advisories/github-reviewed/2017/10/GHSA-fh39-v733-mxfr/GHSA-fh39-v733-mxfr.json index d55d7555a43..39bf0b0c90b 100644 --- a/advisories/github-reviewed/2017/10/GHSA-fh39-v733-mxfr/GHSA-fh39-v733-mxfr.json +++ b/advisories/github-reviewed/2017/10/GHSA-fh39-v733-mxfr/GHSA-fh39-v733-mxfr.json @@ -1,12 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-fh39-v733-mxfr", - "modified": "2020-06-16T21:34:40Z", + "modified": "2023-03-14T22:18:13Z", "published": "2017-10-24T18:33:38Z", "aliases": [ "CVE-2012-2661" ], - "summary": "Moderate severity vulnerability that affects activerecord", + "summary": "Active Record vulnerable to SQL Injection via nested query parameters", "details": "The Active Record component in Ruby on Rails 3.0.x before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly implement the passing of request data to a where method in an ActiveRecord class, which allows remote attackers to conduct certain SQL injection attacks via nested query parameters that leverage unintended recursion, a related issue to CVE-2012-2695.", "severity": [ @@ -75,10 +75,6 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-2661" }, - { - "type": "ADVISORY", - "url": "https://github.com/advisories/GHSA-fh39-v733-mxfr" - }, { "type": "WEB", "url": "https://groups.google.com/group/rubyonrails-security/msg/fc2da6c627fc92df?dmode=source&output=gplain"