From e69ca03f9f8a7e236ea7e73cab2a08272a7d133a Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Mon, 16 Sep 2024 21:54:48 +0000
Subject: [PATCH] Publish GHSA-54qj-48vx-cr9f

---
 .../GHSA-54qj-48vx-cr9f.json                  | 39 +++++++++++--------
 1 file changed, 23 insertions(+), 16 deletions(-)

diff --git a/advisories/github-reviewed/2022/05/GHSA-54qj-48vx-cr9f/GHSA-54qj-48vx-cr9f.json b/advisories/github-reviewed/2022/05/GHSA-54qj-48vx-cr9f/GHSA-54qj-48vx-cr9f.json
index 7b722c4a0cb..d9d4784eeeb 100644
--- a/advisories/github-reviewed/2022/05/GHSA-54qj-48vx-cr9f/GHSA-54qj-48vx-cr9f.json
+++ b/advisories/github-reviewed/2022/05/GHSA-54qj-48vx-cr9f/GHSA-54qj-48vx-cr9f.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-54qj-48vx-cr9f",
-  "modified": "2024-05-21T20:31:08Z",
+  "modified": "2024-09-16T21:53:19Z",
   "published": "2022-05-01T23:48:43Z",
   "aliases": [
     "CVE-2008-2302"
@@ -9,13 +9,20 @@
   "summary": "Django Cross-site scripting (XSS) vulnerability",
   "details": "Cross-site scripting (XSS) vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the URI of a certain previous request.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"
+    }
   ],
   "affected": [
     {
       "package": {
         "ecosystem": "PyPI",
-        "name": "django"
+        "name": "Django"
       },
       "ranges": [
         {
@@ -34,7 +41,7 @@
     {
       "package": {
         "ecosystem": "PyPI",
-        "name": "django"
+        "name": "Django"
       },
       "ranges": [
         {
@@ -53,7 +60,7 @@
     {
       "package": {
         "ecosystem": "PyPI",
-        "name": "django"
+        "name": "Django"
       },
       "ranges": [
         {
@@ -97,27 +104,27 @@
     },
     {
       "type": "WEB",
-      "url": "http://secunia.com/advisories/30250"
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2008-1.yaml"
     },
     {
       "type": "WEB",
-      "url": "http://secunia.com/advisories/30291"
+      "url": "https://web.archive.org/web/20080725022008/http://secunia.com/advisories/30291"
     },
     {
       "type": "WEB",
-      "url": "http://securitytracker.com/id?1020028"
+      "url": "https://web.archive.org/web/20081012011038/http://secunia.com/advisories/30250"
+    },
+    {
+      "type": "WEB",
+      "url": "https://web.archive.org/web/20170222015451/http://securitytracker.com/id?1020028"
+    },
+    {
+      "type": "WEB",
+      "url": "https://web.archive.org/web/20200228153339/http://www.securityfocus.com/bid/29209"
     },
     {
       "type": "WEB",
       "url": "http://www.djangoproject.com/weblog/2008/may/14/security"
-    },
-    {
-      "type": "WEB",
-      "url": "http://www.securityfocus.com/bid/29209"
-    },
-    {
-      "type": "WEB",
-      "url": "http://www.vupen.com/english/advisories/2008/1618"
     }
   ],
   "database_specific": {