From 9f9e6f5453a863bb146eb2bc63ce5ff687e15459 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Fri, 27 Oct 2023 14:21:59 +0000
Subject: [PATCH] Publish GHSA-q7xg-hh3q-hc68

---
 .../2022/05/GHSA-q7xg-hh3q-hc68/GHSA-q7xg-hh3q-hc68.json    | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/advisories/github-reviewed/2022/05/GHSA-q7xg-hh3q-hc68/GHSA-q7xg-hh3q-hc68.json b/advisories/github-reviewed/2022/05/GHSA-q7xg-hh3q-hc68/GHSA-q7xg-hh3q-hc68.json
index 1bc395f2a51..4b1e9f1a962 100644
--- a/advisories/github-reviewed/2022/05/GHSA-q7xg-hh3q-hc68/GHSA-q7xg-hh3q-hc68.json
+++ b/advisories/github-reviewed/2022/05/GHSA-q7xg-hh3q-hc68/GHSA-q7xg-hh3q-hc68.json
@@ -1,17 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-q7xg-hh3q-hc68",
-  "modified": "2022-12-13T19:17:13Z",
+  "modified": "2023-10-27T14:19:48Z",
   "published": "2022-05-24T17:48:06Z",
   "aliases": [
     "CVE-2021-21642"
   ],
   "summary": "XML External Entity Reference vulnerability in Jenkins Config File Provider Plugin",
-  "details": "Config File Provider Plugin 3.7.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.\n\nThis allows attackers with the ability to define Maven configuration files to have Jenkins parse a crafted configuration file that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery.\n\nConfig File Provider Plugin 3.7.1 disables external entity resolution for its XML parser.",
+  "details": "Jenkins Config File Provider Plugin 3.7.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.\n\nThis allows attackers with the ability to define Maven configuration files to have Jenkins parse a crafted configuration file that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery.\n\nJenkins Config File Provider Plugin 3.7.1 disables external entity resolution for its XML parser.",
   "severity": [
     {
       "type": "CVSS_V3",
-      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N"
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"
     }
   ],
   "affected": [