From 765ed3b396ca1dde05a588435d9d546275081692 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Tue, 12 Nov 2024 21:12:42 +0000
Subject: [PATCH] Publish GHSA-mrqx-rp3w-jpjp

---
 .../GHSA-mrqx-rp3w-jpjp.json                  | 61 +------------------
 1 file changed, 2 insertions(+), 59 deletions(-)

diff --git a/advisories/github-reviewed/2024/11/GHSA-mrqx-rp3w-jpjp/GHSA-mrqx-rp3w-jpjp.json b/advisories/github-reviewed/2024/11/GHSA-mrqx-rp3w-jpjp/GHSA-mrqx-rp3w-jpjp.json
index 3a7c2d0bc9a..5e072b8b3b4 100644
--- a/advisories/github-reviewed/2024/11/GHSA-mrqx-rp3w-jpjp/GHSA-mrqx-rp3w-jpjp.json
+++ b/advisories/github-reviewed/2024/11/GHSA-mrqx-rp3w-jpjp/GHSA-mrqx-rp3w-jpjp.json
@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-mrqx-rp3w-jpjp",
-  "modified": "2024-11-06T23:40:12Z",
+  "modified": "2024-11-12T21:11:31Z",
   "published": "2024-11-06T15:22:09Z",
   "aliases": [
     "CVE-2024-50345"
   ],
   "summary": "Symfony vulnerable to open redirect via browser-sanitized URLs",
-  "details": "### Description\n\nThe `Request` class, does not parse URI with special characters the same way browsers do. As a result, an attacker can trick a validator relying on the `Request` class to redirect users to another domain.\n\n### Resolution\n\nThe `Request::create` methods now assert the URI does not contain invalid characters as defined by https://url.spec.whatwg.org/\n\nThe patch for this issue is available [here](https://github.com/symfony/symfony/commit/5a9b08e5740af795854b1b639b7d45b9cbfe8819) for branch 5.4.\n\n### Credits\n\nWe would like to thank Sam Mush for reporting the issue and Nicolas Grekas for providing the fix.",
+  "details": "### Description\n\nThe `Request` class, does not parse URI with special characters the same way browsers do. As a result, an attacker can trick a validator relying on the `Request` class to redirect users to another domain.\n\n### Resolution\n\nThe `Request::create` methods now assert the URI does not contain invalid characters as defined by https://url.spec.whatwg.org/\n\nThe patch for this issue is available [here](https://github.com/symfony/symfony/commit/5a9b08e5740af795854b1b639b7d45b9cbfe8819) for branch 5.4.\n\n### Credits\n\nWe would like to thank Sam Mush - IPASSLab && ZGC Lab for reporting the issue and Nicolas Grekas for providing the fix.",
   "severity": [
     {
       "type": "CVSS_V3",
@@ -75,63 +75,6 @@
           ]
         }
       ]
-    },
-    {
-      "package": {
-        "ecosystem": "Packagist",
-        "name": "symfony/symfony"
-      },
-      "ranges": [
-        {
-          "type": "ECOSYSTEM",
-          "events": [
-            {
-              "introduced": "0"
-            },
-            {
-              "fixed": "5.4.46"
-            }
-          ]
-        }
-      ]
-    },
-    {
-      "package": {
-        "ecosystem": "Packagist",
-        "name": "symfony/symfony"
-      },
-      "ranges": [
-        {
-          "type": "ECOSYSTEM",
-          "events": [
-            {
-              "introduced": "6.0.0"
-            },
-            {
-              "fixed": "6.4.14"
-            }
-          ]
-        }
-      ]
-    },
-    {
-      "package": {
-        "ecosystem": "Packagist",
-        "name": "symfony/symfony"
-      },
-      "ranges": [
-        {
-          "type": "ECOSYSTEM",
-          "events": [
-            {
-              "introduced": "7.0.0"
-            },
-            {
-              "fixed": "7.1.7"
-            }
-          ]
-        }
-      ]
     }
   ],
   "references": [