From 3fb0777081ee9b7b49d032fa3008caad9988134c Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Mon, 4 Mar 2024 23:40:17 +0000
Subject: [PATCH] Publish GHSA-7px3-6f6g-hxcj

---
 .../GHSA-7px3-6f6g-hxcj.json                  | 24 ++++++++++++++-----
 1 file changed, 18 insertions(+), 6 deletions(-)

diff --git a/advisories/github-reviewed/2018/10/GHSA-7px3-6f6g-hxcj/GHSA-7px3-6f6g-hxcj.json b/advisories/github-reviewed/2018/10/GHSA-7px3-6f6g-hxcj/GHSA-7px3-6f6g-hxcj.json
index 70bdc4e801a..f6d13fe8dbd 100644
--- a/advisories/github-reviewed/2018/10/GHSA-7px3-6f6g-hxcj/GHSA-7px3-6f6g-hxcj.json
+++ b/advisories/github-reviewed/2018/10/GHSA-7px3-6f6g-hxcj/GHSA-7px3-6f6g-hxcj.json
@@ -1,12 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-7px3-6f6g-hxcj",
-  "modified": "2021-09-03T21:01:44Z",
+  "modified": "2024-03-04T23:38:56Z",
   "published": "2018-10-17T19:55:34Z",
   "aliases": [
     "CVE-2018-8026"
   ],
-  "summary": "Moderate severity vulnerability that affects org.apache.solr:solr-core",
+  "summary": "XML external entity expansion in org.apache.solr:solr-core",
   "details": "This vulnerability in Apache Solr 6.0.0 to 6.6.4 and 7.0.0 to 7.3.1 relates to an XML external entity expansion (XXE) in Solr config files (currency.xml, enumsConfig.xml referred from schema.xml, TIKA parsecontext config file). In addition, Xinclude functionality provided in these config files is also affected in a similar way. The vulnerability can be used as XXE using file/ftp/http protocols in order to read arbitrary local files from the Solr server or the internal network. The manipulated files can be uploaded as configsets using Solr's API, allowing to exploit that vulnerability.",
   "severity": [
     {
@@ -59,6 +59,22 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8026"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/apache/lucene-solr/commit/1880d4824e6c5f98170b9a00aad1d437ee2aa12"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/apache/lucene-solr/commit/3aa6086ed99fa7158d423dc7c33dae6da466b09"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/apache/lucene-solr/commit/d1baf6ba593561f39e2da0a71a8440797005b55"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/apache/lucene-solr/commit/e5407c5a9710247e5f728aae36224a245a51f0b"
+    },
     {
       "type": "ADVISORY",
       "url": "https://github.com/advisories/GHSA-7px3-6f6g-hxcj"
@@ -74,10 +90,6 @@
     {
       "type": "WEB",
       "url": "https://security.netapp.com/advisory/ntap-20190307-0002"
-    },
-    {
-      "type": "WEB",
-      "url": "http://www.securityfocus.com/bid/104690"
     }
   ],
   "database_specific": {