Cross site scripting

Cross-site Scripting XSS - Generic in GitHub repository jgraph/drawio prior to 20.3.0...

Cross site scripting

Cross-site Scripting XSS - Generic in GitHub repository jgraph/drawio prior to 20.3.0...

CVE-2022-3138 Cross-site Scripting (XSS) - Generic in jgraph/drawio

Cross-site Scripting XSS - Generic in GitHub repository jgraph/drawio prior to 20.3.0...

CVE-2022-3138

Cross-site Scripting XSS - Generic in GitHub repository jgraph/drawio prior to 20.3.0...

CVE-2022-3138

CVE-2022-3138 is a Cross-site Scripting (XSS) vulnerability in the GitHub repository for jgraph/drawio, affecting versions prior to 20.3.0. The issue stems from how the application handles a URL parameter used for refresh/back actions, leading to potential script injection via location.href witho...

CVE-2022-3138 Cross-site Scripting (XSS) - Generic in jgraph/drawio

Cross-site Scripting XSS - Generic in GitHub repository jgraph/drawio prior to 20.3.0...

CVE-2022-3148

Cross-site Scripting XSS - Generic in GitHub repository jgraph/drawio prior to 20.3.0...

CVE-2022-3148 Cross-site Scripting (XSS) - Generic in jgraph/drawio

Cross-site Scripting XSS - Generic in GitHub repository jgraph/drawio prior to 20.3.0...

CVE-2022-3148

CVE-2022-3148 describes a Cross-site Scripting (XSS) vulnerability in JGraph Draw.io (GitHub: jgraph/drawio) prior to version 20.3.0. The issue arises from how the application processes the use tag with dompurify, enabling an XSS payload to bypass CSP in some scenarios (e.g., a crafted SVG refere...

CVE-2022-3148 Cross-site Scripting (XSS) - Generic in jgraph/drawio

Cross-site Scripting XSS - Generic in GitHub repository jgraph/drawio prior to 20.3.0...

PT-2022-20724 · Drawio · Drawio

Name of the Vulnerable Software and Affected Versions: drawio versions prior to 20.3.0 Description: The issue is related to Cross-site Scripting XSS - Generic in the GitHub repository jgraph/drawio. Recommendations: For versions prior to 20.3.0, update to version 20.3.0 or later to resolve the...

JGraph draw.io 跨站脚本漏洞

JGraph draw.io is a configurable chart/whiteboard visualization application for JGraph. A cross-site scripting vulnerability exists in JGraph draw.io versions prior to 20.3.0, which stems from the application allowing the "use" tag to be passed to dompurify when "U" is imported before a "?" When...

CVE-2022-3138: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Generic in GitHub repository jgraph/drawio prior to 20.3.0...

CVE-2022-3148: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Generic in GitHub repository jgraph/drawio prior to 20.3.0...

PT-2022-20755 · Drawio · Drawio

Name of the Vulnerable Software and Affected Versions: drawio versions prior to 20.3.0 Description: The issue is related to Cross-site Scripting XSS - Generic in the GitHub repository jgraph/drawio. Recommendations: For versions prior to 20.3.0, update to version 20.3.0 or later to resolve the...

CVE-2022-3127

Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 20.2.8...

CVE-2022-3127

Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 20.2.8...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 20.2.8...

CVE-2022-3127 Cross-site Scripting (XSS) - Stored in jgraph/drawio

Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 20.2.8...

CVE-2022-3127

CVE-2022-3127 describes a stored Cross-site Scripting (XSS) vulnerability in the GitHub project jgraph/drawio, affecting versions prior to 20.2.8. The issue is documented across multiple sources (NVD, Red Hat, CVE List, OSV, etc.) as an XSS in draw.io prior to 20.2.8. The connected documents prov...