Publish GHSA-894g-6j7q-2hx6

advisories/github-reviewed/2018/12/GHSA-894g-6j7q-2hx6/GHSA-894g-6j7q-2hx6.json

@@ -1,24 +1,28 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-894g-6j7q-2hx6",
-  "modified": "2022-03-26T00:47:37Z",
+  "modified": "2024-09-20T17:45:11Z",
   "published": "2018-12-19T19:23:52Z",
   "aliases": [
     "CVE-2018-16516"
   ],
-  "summary": "Cross site scripting in flask-admin",
+  "summary": "Flask-Admin Cross-site Scripting vulnerability",
   "details": "helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL.",
   "severity": [
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"
     }
   ],
   "affected": [
     {
       "package": {
         "ecosystem": "PyPI",
-        "name": "flask-admin"
+        "name": "Flask-Admin"
       },
       "ranges": [
         {
@@ -60,6 +64,10 @@
       "type": "WEB",
       "url": "https://github.com/flask-admin/flask-admin/releases/tag/v1.5.3"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/flask-admin/PYSEC-2018-54.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJIYCWIH3BRLI2QNC53CQXLKVP27X7EH"