{"action":"closed","issue":{"url":"https://api.github.com/repos/mixellent/ridemo/issues/23","repository_url":"https://api.github.com/repos/mixellent/ridemo","labels_url":"https://api.github.com/repos/mixellent/ridemo/issues/23/labels{/name}","comments_url":"https://api.github.com/repos/mixellent/ridemo/issues/23/comments","events_url":"https://api.github.com/repos/mixellent/ridemo/issues/23/events","html_url":"https://github.com/mixellent/ridemo/issues/23","id":363935227,"node_id":"MDU6SXNzdWUzNjM5MzUyMjc=","number":23,"title":"CVE-2016-0752 high severity vulnerability detected by WhiteSource","user":{"login":"whitesource-bolt-for-github[bot]","id":42819689,"node_id":"MDM6Qm90NDI4MTk2ODk=","avatar_url":"https://avatars2.githubusercontent.com/in/16809?v=4","gravatar_id":"","url":"https://api.github.com/users/whitesource-bolt-for-github%5Bbot%5D","html_url":"https://github.com/apps/whitesource-bolt-for-github","followers_url":"https://api.github.com/users/whitesource-bolt-for-github%5Bbot%5D/followers","following_url":"https://api.github.com/users/whitesource-bolt-for-github%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/whitesource-bolt-for-github%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/whitesource-bolt-for-github%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/whitesource-bolt-for-github%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/whitesource-bolt-for-github%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/whitesource-bolt-for-github%5Bbot%5D/repos","events_url":"https://api.github.com/users/whitesource-bolt-for-github%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/whitesource-bolt-for-github%5Bbot%5D/received_events","type":"Bot","site_admin":false},"labels":[{"id":1069880116,"node_id":"MDU6TGFiZWwxMDY5ODgwMTE2","url":"https://api.github.com/repos/mixellent/ridemo/labels/tets","name":"tets","color":"0e8a16","default":false}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-09-26T09:27:37Z","updated_at":"2018-10-08T22:57:22Z","closed_at":"2018-10-08T22:57:22Z","author_association":"CONTRIBUTOR","body":"## CVE-2016-0752 - High Vulnerability\n<details><summary>:warning: Vulnerable Library - <b>rails-3.0.9.gem</b></p></summary>\n<p>path: /ridemo/Gemfile.lock</p>\n<p>\n\nDependency Hierarchy:\n  - :x: **rails-3.0.9.gem** (Vulnerable Library)\n</p>\n</details>\n<p></p>\n<details><summary>:red_circle: Vulnerability Details</summary>\n<p>  \n  \nDirectory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.\n\n<p>Publish Date: 2016-02-16\n<p>URL: <a href=https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0752>CVE-2016-0752</a></p>\n</p>\n</details>\n<p></p>\n<details><summary>:dart: CVSS 3 Score Details (<b>7.5</b>)</summary>\n<p>\n\nBase Score Metrics:\n- Exploitability Metrics:\n  - Attack Vector: Network\n  - Attack Complexity: Low\n  - Privileges Required: None\n  - User Interaction: None\n  - Scope: Unchanged\n- Impact Metrics:\n  - Confidentiality Impact: High\n  - Integrity Impact: None\n  - Availability Impact: None\n</p>\nFor more information on CVSS3 Scores, click <a href=\"https://www.first.org/cvss/calculator/3.0\">here</a>.\n</p>\n</details>\n<p></p>\n\n***\nWant to learn more about the open source vulnerabilities in your products? Click [here](https://www.whitesourcesoftware.com)"}}
{"actor":{"display_login":"mixellent"}}