diff --git a/advisories/github-reviewed/2018/12/GHSA-894g-6j7q-2hx6/GHSA-894g-6j7q-2hx6.json b/advisories/github-reviewed/2018/12/GHSA-894g-6j7q-2hx6/GHSA-894g-6j7q-2hx6.json index e90aed7fb4d..4e5fb0f329a 100644 --- a/advisories/github-reviewed/2018/12/GHSA-894g-6j7q-2hx6/GHSA-894g-6j7q-2hx6.json +++ b/advisories/github-reviewed/2018/12/GHSA-894g-6j7q-2hx6/GHSA-894g-6j7q-2hx6.json @@ -1,24 +1,28 @@ { "schema_version": "1.4.0", "id": "GHSA-894g-6j7q-2hx6", - "modified": "2022-03-26T00:47:37Z", + "modified": "2024-09-20T17:45:11Z", "published": "2018-12-19T19:23:52Z", "aliases": [ "CVE-2018-16516" ], - "summary": "Cross site scripting in flask-admin", + "summary": "Flask-Admin Cross-site Scripting vulnerability", "details": "helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL.", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" } ], "affected": [ { "package": { "ecosystem": "PyPI", - "name": "flask-admin" + "name": "Flask-Admin" }, "ranges": [ { @@ -60,6 +64,10 @@ "type": "WEB", "url": "https://github.com/flask-admin/flask-admin/releases/tag/v1.5.3" }, + { + "type": "WEB", + "url": "https://github.com/pypa/advisory-database/tree/main/vulns/flask-admin/PYSEC-2018-54.yaml" + }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJIYCWIH3BRLI2QNC53CQXLKVP27X7EH"