CVE-2022-3148

🗓️ 08 Sep 2022 09:25:09Reported by @huntrdevType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 46 Views

CVE-2022-3148 Cross-site Scripting (XSS) in GitHub repository jgraph/drawio prior to 20.3.0

Reporter	Title	Published	Views	Family All 11
Huntr	XSS at app.diagrams.net	6 Sep 202222:15	–	huntr
ATTACKERKB	CVE-2022-3148	8 Sep 202210:15	–	attackerkb
Circl	CVE-2022-3148	8 Sep 202214:15	–	circl
CNNVD	JGraph draw.io 跨站脚本漏洞	8 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-3148 Cross-site Scripting (XSS) - Generic in jgraph/drawio	8 Sep 202209:25	–	cvelist
EUVD	EUVD-2022-42572	3 Oct 202520:07	–	euvd
NVD	CVE-2022-3148	8 Sep 202210:15	–	nvd
OSV	CVE-2022-3148 Cross-site Scripting (XSS) - Generic in jgraph/drawio	8 Sep 202209:25	–	osv
Prion	Cross site scripting	8 Sep 202210:15	–	prion
Positive Technologies	PT-2022-20755 · Drawio · Drawio	8 Sep 202200:00	–	ptsecurity

NVD

Node

diagrams drawioRange<20.3.0

[
  {
    "product": "jgraph/drawio",
    "vendor": "jgraph",
    "versions": [
      {
        "lessThan": "20.3.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]