From 6af6131d4f3da1d1f551b3c8ad973a23d0ff6ddc Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Fri, 27 Oct 2023 14:33:52 +0000
Subject: [PATCH] Publish GHSA-gchq-9r68-6jwv

---
 .../2021/06/GHSA-gchq-9r68-6jwv/GHSA-gchq-9r68-6jwv.json  | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/advisories/github-reviewed/2021/06/GHSA-gchq-9r68-6jwv/GHSA-gchq-9r68-6jwv.json b/advisories/github-reviewed/2021/06/GHSA-gchq-9r68-6jwv/GHSA-gchq-9r68-6jwv.json
index a563b5f21a4..10b5ad317ca 100644
--- a/advisories/github-reviewed/2021/06/GHSA-gchq-9r68-6jwv/GHSA-gchq-9r68-6jwv.json
+++ b/advisories/github-reviewed/2021/06/GHSA-gchq-9r68-6jwv/GHSA-gchq-9r68-6jwv.json
@@ -1,17 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-gchq-9r68-6jwv",
-  "modified": "2023-05-24T14:30:40Z",
+  "modified": "2023-10-27T14:31:46Z",
   "published": "2021-06-16T17:24:31Z",
   "aliases": [
     "CVE-2021-21648"
   ],
   "summary": "Cross-Site Request Forgery in Jenkins Credentials Plugin",
-  "details": "Jenkins Credentials Plugin prior to 2.3.19, 2.3.15.1, 2.3.14.1, 2.3.13.1, 2.3.7.1, and 2.3.0.1 does not escape user-controlled information on a view it provides, resulting in a reflected cross-site scripting (XSS) vulnerability.\n\nCredentials Plugin 2.3.19, 2.3.15.1, 2.3.14.1, 2.3.13.1, 2.3.7.1, and 2.3.0.1 restricts the user-controlled information it provides to a safe subset.",
+  "details": "Jenkins Credentials Plugin prior to 2.3.19, 2.3.15.1, 2.3.14.1, 2.3.13.1, 2.3.7.1, and 2.3.0.1 does not escape user-controlled information on a view it provides, resulting in a reflected cross-site scripting (XSS) vulnerability.\n\nJenkins Credentials Plugin 2.3.19, 2.3.15.1, 2.3.14.1, 2.3.13.1, 2.3.7.1, and 2.3.0.1 restricts the user-controlled information it provides to a safe subset.",
   "severity": [
     {
       "type": "CVSS_V3",
-      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
     }
   ],
   "affected": [
@@ -158,7 +158,7 @@
     "cwe_ids": [
       "CWE-79"
     ],
-    "severity": "HIGH",
+    "severity": "MODERATE",
     "github_reviewed": true,
     "github_reviewed_at": "2021-05-19T19:18:23Z",
     "nvd_published_at": "2021-05-11T15:15:00Z"