From 6bc265498bd0b52a9afbca7d30498c6a246ac042 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Wed, 4 Dec 2024 16:15:00 +0000
Subject: [PATCH] Publish GHSA-j5g2-q29x-cw3h

---
 .../2024/12/GHSA-j5g2-q29x-cw3h/GHSA-j5g2-q29x-cw3h.json     | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/advisories/github-reviewed/2024/12/GHSA-j5g2-q29x-cw3h/GHSA-j5g2-q29x-cw3h.json b/advisories/github-reviewed/2024/12/GHSA-j5g2-q29x-cw3h/GHSA-j5g2-q29x-cw3h.json
index b1d555fc974..9927822357f 100644
--- a/advisories/github-reviewed/2024/12/GHSA-j5g2-q29x-cw3h/GHSA-j5g2-q29x-cw3h.json
+++ b/advisories/github-reviewed/2024/12/GHSA-j5g2-q29x-cw3h/GHSA-j5g2-q29x-cw3h.json
@@ -1,11 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-j5g2-q29x-cw3h",
-  "modified": "2024-12-02T20:00:29Z",
+  "modified": "2024-12-04T16:13:50Z",
   "published": "2024-12-02T20:00:29Z",
+  "withdrawn": "2024-12-04T16:13:50Z",
   "aliases": [],
   "summary": "SimpleSAMLphp vulnerable to XXE in parsing SAML messages",
-  "details": "# Summary\nWhen loading an (untrusted) XML document, for example the SAMLResponse, it's possible to induce an XXE.\n\n## Mitigation:\n\nRemove the `LIBXML_DTDLOAD | LIBXML_DTDATTR` options from `$options` is in: https://github.com/simplesamlphp/saml2/blob/717c0adc4877ebd58428637e5626345e59fa0109/src/SAML2/DOMDocumentFactory.php#L41\n\n## Background / details\n\nTo be published on Dec 8th",
+  "details": "## Withdrawn Advisory\nThis advisory has been withdrawn because the vulnerability affects users of the SimpleSAMLphp tarball, not the SimpleSAMLphp Composer package. The underlying information about CVE-2024-52596 is still valid.\n\n## Original Description\n\n# Summary\nWhen loading an (untrusted) XML document, for example the SAMLResponse, it's possible to induce an XXE.\n\n## Mitigation:\n\nRemove the `LIBXML_DTDLOAD | LIBXML_DTDATTR` options from `$options` is in: https://github.com/simplesamlphp/saml2/blob/717c0adc4877ebd58428637e5626345e59fa0109/src/SAML2/DOMDocumentFactory.php#L41\n\n## Background / details\n\nTo be published on Dec 8th",
   "severity": [
     {
       "type": "CVSS_V3",