From e38823525a74f3b980adb9bf34d3053a1f8478cb Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Wed, 13 Sep 2023 20:22:38 +0000
Subject: [PATCH] Publish GHSA-2mm9-c2fx-c7m4

---
 .../GHSA-2mm9-c2fx-c7m4.json                   | 18 +++++++++++++-----
 1 file changed, 13 insertions(+), 5 deletions(-)

diff --git a/advisories/github-reviewed/2021/03/GHSA-2mm9-c2fx-c7m4/GHSA-2mm9-c2fx-c7m4.json b/advisories/github-reviewed/2021/03/GHSA-2mm9-c2fx-c7m4/GHSA-2mm9-c2fx-c7m4.json
index 27ef17cb994..a23072fe392 100644
--- a/advisories/github-reviewed/2021/03/GHSA-2mm9-c2fx-c7m4/GHSA-2mm9-c2fx-c7m4.json
+++ b/advisories/github-reviewed/2021/03/GHSA-2mm9-c2fx-c7m4/GHSA-2mm9-c2fx-c7m4.json
@@ -1,15 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-2mm9-c2fx-c7m4",
-  "modified": "2021-03-15T23:55:40Z",
+  "modified": "2023-09-13T20:21:27Z",
   "published": "2021-03-01T19:44:27Z",
   "aliases": [
     "CVE-2021-23342"
   ],
-  "summary": "XSS in docsify",
-  "details": "This affects the package docsify before 4.12.0. It is possible to bypass the remediation done by CVE-2020-7680 and execute malicious JavaScript through the following methods 1) When parsing HTML from remote URLs, the HTML code on the main page is sanitized, but this sanitization is not taking place in the sidebar. 2) The isURL external check can be bypassed by inserting more “////” characters",
+  "summary": "Docsify XSS Vulnerability",
+  "details": "This affects the package docsify before 4.12.0. It is possible to bypass the remediation done by CVE-2020-7680 and execute malicious JavaScript through the following methods 1) When parsing HTML from remote URLs, the HTML code on the main page is sanitized, but this sanitization is not taking place in the sidebar. 2) The isURL external check can be bypassed by inserting more `////` characters",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    }
   ],
   "affected": [
     {
@@ -17,6 +20,11 @@
         "ecosystem": "npm",
         "name": "docsify"
       },
+      "ecosystem_specific": {
+        "affected_functions": [
+          ""
+        ]
+      },
       "ranges": [
         {
           "type": "ECOSYSTEM",
@@ -66,7 +74,7 @@
     "cwe_ids": [
       "CWE-79"
     ],
-    "severity": "HIGH",
+    "severity": "MODERATE",
     "github_reviewed": true,
     "github_reviewed_at": "2021-02-24T07:31:57Z",
     "nvd_published_at": "2021-02-19T17:15:00Z"