From e46590692ef027c9e9d7ab93db45eaf67e1a6e01 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Thu, 14 Mar 2024 21:29:34 +0000
Subject: [PATCH] Publish GHSA-vpr3-f594-mg5g

---
 .../05/GHSA-vpr3-f594-mg5g/GHSA-vpr3-f594-mg5g.json  | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/advisories/github-reviewed/2022/05/GHSA-vpr3-f594-mg5g/GHSA-vpr3-f594-mg5g.json b/advisories/github-reviewed/2022/05/GHSA-vpr3-f594-mg5g/GHSA-vpr3-f594-mg5g.json
index 02693859972..e804174ecf9 100644
--- a/advisories/github-reviewed/2022/05/GHSA-vpr3-f594-mg5g/GHSA-vpr3-f594-mg5g.json
+++ b/advisories/github-reviewed/2022/05/GHSA-vpr3-f594-mg5g/GHSA-vpr3-f594-mg5g.json
@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-vpr3-f594-mg5g",
-  "modified": "2022-06-17T22:33:40Z",
+  "modified": "2024-03-14T21:28:08Z",
   "published": "2022-05-17T03:28:34Z",
   "aliases": [
     "CVE-2010-1622"
   ],
   "summary": "Improper Control of Generation of Code ('Code Injection') in Spring Framework",
-  "details": "SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoader.URLs[0]=jar: followed by a URL of a crafted .jar file.",
+  "details": "SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing `class.classLoader.URLs[0]=jar:` followed by a URL of a crafted .jar file.",
   "severity": [
 
   ],
@@ -62,6 +62,10 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-1622"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/spring-projects/spring-framework/commit/3a5af35d37c79d0644d49b93f792a4c18fe8eb71"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/errata/RHSA-2011:0175"
@@ -74,6 +78,10 @@
       "type": "WEB",
       "url": "https://bugzilla.redhat.com/show_bug.cgi?id=606706"
     },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/spring-projects/spring-framework"
+    },
     {
       "type": "WEB",
       "url": "https://seclists.org/fulldisclosure/2010/Jun/456"