From e84555459198336be0e0bac06216071be59e6f82 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Mon, 4 Mar 2024 23:44:12 +0000
Subject: [PATCH] Publish GHSA-wr5r-m8pc-85j9

---
 .../2019/01/GHSA-wr5r-m8pc-85j9/GHSA-wr5r-m8pc-85j9.json  | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/advisories/github-reviewed/2019/01/GHSA-wr5r-m8pc-85j9/GHSA-wr5r-m8pc-85j9.json b/advisories/github-reviewed/2019/01/GHSA-wr5r-m8pc-85j9/GHSA-wr5r-m8pc-85j9.json
index fdb15201963..ed0abeac184 100644
--- a/advisories/github-reviewed/2019/01/GHSA-wr5r-m8pc-85j9/GHSA-wr5r-m8pc-85j9.json
+++ b/advisories/github-reviewed/2019/01/GHSA-wr5r-m8pc-85j9/GHSA-wr5r-m8pc-85j9.json
@@ -1,12 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-wr5r-m8pc-85j9",
-  "modified": "2020-06-16T22:01:07Z",
+  "modified": "2024-03-04T23:42:26Z",
   "published": "2019-01-25T16:18:49Z",
   "aliases": [
     "CVE-2019-3772"
   ],
-  "summary": "Low severity vulnerability that affects org.springframework.integration:spring-integration-ws and org.springframework.integration:spring-integration-xml",
+  "summary": "Improper Restriction of XML External Entity Reference in org.springframework.integration:spring-integration-ws and org.springframework.integration:spring-integration-xml",
   "details": "Spring Integration (spring-integration-xml and spring-integration-ws modules), versions 4.3.18, 5.0.10, 5.1.1, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.",
   "severity": [
 
@@ -132,6 +132,10 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3772"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/spring-projects/spring-integration/commit/59c69ed40d3755ef59f80872e0ea711adbb13620"
+    },
     {
       "type": "ADVISORY",
       "url": "https://github.com/advisories/GHSA-wr5r-m8pc-85j9"