diff --git a/app/models/advisory.rb b/app/models/advisory.rb
index c53a4bdcd..07528e880 100644
--- a/app/models/advisory.rb
+++ b/app/models/advisory.rb
@@ -11,7 +11,7 @@ class Advisory < ActiveRecord::Base
   after_create :generate_advisory_id
   before_save  :normalize_references, if: :references_changed?
 
-  attr_accessible :description
+  attr_accessible :description, :references
 
   ID_TEMPLATE        = 'ROSA-%<type>s-%<year>d:%<id>04d'
   ID_STRING_TEMPLATE = 'ROSA-%<type>s-%<year>04s:%<id>04s'