diff --git a/advisories/github-reviewed/2021/01/GHSA-wjx2-7hqq-8h7m/GHSA-wjx2-7hqq-8h7m.json b/advisories/github-reviewed/2021/01/GHSA-wjx2-7hqq-8h7m/GHSA-wjx2-7hqq-8h7m.json index 4480bed01da..bcbcf1ecd8c 100644 --- a/advisories/github-reviewed/2021/01/GHSA-wjx2-7hqq-8h7m/GHSA-wjx2-7hqq-8h7m.json +++ b/advisories/github-reviewed/2021/01/GHSA-wjx2-7hqq-8h7m/GHSA-wjx2-7hqq-8h7m.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-wjx2-7hqq-8h7m", - "modified": "2021-01-14T19:15:02Z", + "modified": "2023-07-03T21:56:16Z", "published": "2021-01-14T19:17:16Z", "aliases": [ "CVE-2020-36190" @@ -9,7 +9,10 @@ "summary": "rails_admin ruby gem XSS vulnerability", "details": "RailsAdmin (aka rails_admin) before 1.4.3 and 2.x before 2.0.2 allows XSS via nested forms.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } ], "affected": [ { @@ -60,6 +63,10 @@ "type": "WEB", "url": "https://github.com/sferik/rails_admin/commit/d72090ec6a07c3b9b7b48ab50f3d405f91ff4375" }, + { + "type": "PACKAGE", + "url": "https://github.com/railsadminteam/rails_admin/" + }, { "type": "WEB", "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rails_admin/CVE-2020-36190.yml"