CVE-2022-1730: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 18.0.4...

CVE-2022-1774

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.0.7...

CVE-2022-1774 Exposure of Sensitive Information to an Unauthorized Actor in jgraph/drawio

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.0.7...

CVE-2022-1774 Exposure of Sensitive Information to an Unauthorized Actor in jgraph/drawio

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.0.7...

CVE-2022-1774

CVE-2022-1774 affects the jgraph/drawio project prior to version 18.0.7. The provided connected sources consistently describe exposure of sensitive information to an unauthorized actor in the draw.io GitHub repository, with multiple entries corroborating the issue and noting the fixed version as ...

CVE-2022-1774

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.0.7...

CVE-2022-1767

Server-Side Request Forgery SSRF in GitHub repository jgraph/drawio prior to 18.0.7...

CVE-2022-1767

Server-Side Request Forgery SSRF in GitHub repository jgraph/drawio prior to 18.0.7...

CVE-2022-1767

The CVE-2022-1767 instance concerns a Server-Side Request Forgery (SSRF) in the GitHub repository jgraph/drawio, affecting versions prior to 18.0.7. Affected component: draw.io server-side handling could be tricked into issuing unintended requests. Impact reported in CVSS: CVSS3.1 base score 7.5 ...

CVE-2022-1767

Server-Side Request Forgery SSRF in GitHub repository jgraph/drawio prior to 18.0.7...

CVE-2022-1767 Server-Side Request Forgery (SSRF) in jgraph/drawio

Server-Side Request Forgery SSRF in GitHub repository jgraph/drawio prior to 18.0.7...

CVE-2022-1767 Server-Side Request Forgery (SSRF) in jgraph/drawio

Server-Side Request Forgery SSRF in GitHub repository jgraph/drawio prior to 18.0.7...

CVE-2022-1727

Improper Input Validation in GitHub repository jgraph/drawio prior to 18.0.6...

CVE-2022-1727

Improper Input Validation in GitHub repository jgraph/drawio prior to 18.0.6...

Input validation

Improper Input Validation in GitHub repository jgraph/drawio prior to 18.0.6...

CVE-2022-1727

CVE-2022-1727 affects the GitHub project jgraph/drawio prior to version 18.0.6. The root cause is improper input validation in the Electron desktop app’s link handling, allowing crafted links (e.g., via file: or other dangerous schemas) to be passed to shell.openExternal and potentially trigger c...

CVE-2022-1727 Improper Input Validation in jgraph/drawio

Improper Input Validation in GitHub repository jgraph/drawio prior to 18.0.6...

CVE-2022-1727

Improper Input Validation in GitHub repository jgraph/drawio prior to 18.0.6...

CVE-2022-1727 Improper Input Validation in jgraph/drawio

Improper Input Validation in GitHub repository jgraph/drawio prior to 18.0.6...

PT-2022-14077 · Unknown · Jgraph/Drawio

Name of the Vulnerable Software and Affected Versions: jgraph/drawio versions prior to 18.0.6 Description: The issue is related to improper input validation in the GitHub repository jgraph/drawio. Recommendations: For versions prior to 18.0.6, update to version 18.0.6 or later to resolve the issu...