CVE-2022-2015

Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 19.0.2...

Code injection

Code Injection in GitHub repository jgraph/drawio prior to 19.0.2...

JGraph draw.io 跨站脚本漏洞

JGraph draw.io is a configurable chart/whiteboard visualization application from JGraph. A security vulnerability exists in JGraph draw.io versions prior to 19.0.2 that stems from a cross-site scripting XSS issue...

CVE-2022-2015 Cross-site Scripting (XSS) - Stored in jgraph/drawio

Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 19.0.2...

CVE-2022-2015

Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 19.0.2...

CVE-2022-2015 Cross-site Scripting (XSS) - Stored in jgraph/drawio

Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 19.0.2...

CVE-2022-2015

CVE-2022-2015 affects jgraph/drawio prior to 19.0.2 with a stored XSS vulnerability. The issue is in the GitHub repository and requires upgrade to 19.0.2 or later to remediate. Exploit details are not provided in the connected documents.

CVE-2022-2014

Code Injection in GitHub repository jgraph/drawio prior to 19.0.2...

CVE-2022-2014 Code Injection in jgraph/drawio

Code Injection in GitHub repository jgraph/drawio prior to 19.0.2...

CVE-2022-2014

CVE-2022-2014 affects the jgraph/drawio project prior to 19.0.2. The connected sources describe a vulnerability in how diagram data is deserialized, enabling code injection via diagram content (notably unsafe deserialization of diagram elements and attributes), which can lead to client-side remot...

CVE-2022-2014 Code Injection in jgraph/drawio

Code Injection in GitHub repository jgraph/drawio prior to 19.0.2...

Command execution vulnerability in JGraph drawio-desktop

drawio-desktop is an Electron-based diagramming and whiteboarding desktop application. A command execution vulnerability exists in JGraph drawio-desktop that can be exploited by an attacker to cause code execution...

PT-2022-14384

Name of the Vulnerable Software and Affected Versions jgraph/drawio versions prior to 19.0.2 Description The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input and later displays it without proper validation, allowing attackers to inject...

CVE-2022-2014: Improper Control of Generation of Code

Code Injection in GitHub repository jgraph/drawio prior to 19.0.2...

CVE-2022-2015: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 19.0.2...

PT-2022-14377

Name of the Vulnerable Software and Affected Versions jgraph/drawio versions prior to 19.0.2 Description The issue concerns a code injection problem in the jgraph/drawio GitHub repository. Recommendations For versions prior to 19.0.2, update to version 19.0.2 or later to resolve the issue...

CVE-2022-1815

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.1.2...

CVE-2022-1815

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.1.2...

CVE-2022-1815

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.1.2...

CVE-2022-1815

Drawio (jgraph/drawio) prior to version 18.1.2 is affected by a server-side request forgery (SSRF) via the /service endpoint. The Nuclei template and related sources confirm an SSRF that could allow an attacker to obtain sensitive information, modify data, or perform unauthorized administrative a...