CVE-2023-3973 Cross-site Scripting (XSS) - Reflected in jgraph/drawio

Cross-site Scripting XSS - Reflected in GitHub repository jgraph/drawio prior to 21.6.3...

CVE-2023-3973

CVE-2023-3973 is a cross-site scripting (XSS) vulnerability reported as a reflected XSS in jgraph/drawio prior to version 21.6.3. Multiple sources in the connected set describe an XSS vector that can be triggered via user-controlled labels and plugin handling, including HTML decoding and injectio...

CVE-2023-3973 Cross-site Scripting (XSS) - Reflected in jgraph/drawio

Cross-site Scripting XSS - Reflected in GitHub repository jgraph/drawio prior to 21.6.3...

CVE-2023-3973 Cross-site Scripting (XSS) - Reflected in jgraph/drawio

Cross-site Scripting XSS - Reflected in GitHub repository jgraph/drawio prior to 21.6.3...

PT-2023-27087

Name of the Vulnerable Software and Affected Versions jgraph/drawio versions prior to 21.6.3 Description The issue is related to Cross-site Scripting XSS - Reflected. This means an attacker can inject malicious scripts into a website, which will then be executed by the user's browser. No...

CVE-2023-3973: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Reflected in GitHub repository jgraph/drawio prior to 21.6.3...

PT-2023-27100

Name of the Vulnerable Software and Affected Versions jgraph/drawio versions prior to 21.5.0 Description The issue is an OS Command Injection in the GitHub repository jgraph/drawio. Recommendations For versions prior to 21.5.0, update to version 21.5.0 or later to resolve the issue...

PT-2023-27096

Name of the Vulnerable Software and Affected Versions jgraph/drawio versions prior to 21.4.0 Description The issue is an OS Command Injection in the GitHub repository jgraph/drawio. Recommendations For versions prior to 21.4.0, update to version 21.4.0 or later to resolve the issue...

CVE-2023-3974: Improper Neutralization of Special Elements used in an OS Command

OS Command Injection in GitHub repository jgraph/drawio prior to 21.4.0...

CVE-2023-3975: Improper Neutralization of Special Elements used in an OS Command

OS Command Injection in GitHub repository jgraph/drawio prior to 21.5.0...

CVE-2023-3398

Denial of Service in GitHub repository jgraph/drawio prior to 18.1.3...

Denial of service

Denial of Service in GitHub repository jgraph/drawio prior to 18.1.3...

CVE-2023-3398 Denial of Service in jgraph/drawio

Denial of Service in GitHub repository jgraph/drawio prior to 18.1.3...

CVE-2023-3398 Denial of Service in jgraph/drawio

Denial of Service in GitHub repository jgraph/drawio prior to 18.1.3...

CVE-2023-3398 Denial of Service in jgraph/drawio

Denial of Service in GitHub repository jgraph/drawio prior to 18.1.3...

CVE-2023-3398

CVE-2023-3398 affects the JGraph Drawio project. Affected software: drawio (GitHub repository jgraph/drawio) prior to version 18.1.3. Root cause and impact: a Denial of Service leads to degraded/blocked service when handling large uploads, with the observed impact described as DoS and confirmed b...

CVE-2023-3398

Denial of Service in GitHub repository jgraph/drawio prior to 18.1.3...

drawio 资源管理错误漏洞

JGraph drawio is a JavaScript client editor from JGraph. A resource management error vulnerability exists in versions of drawio prior to 18.1.3, which stems from an upload of a large file causing a system denial of service...

CVE-2023-3398: Uncontrolled Resource Consumption

Denial of Service in GitHub repository jgraph/drawio prior to 18.1.3...

PT-2023-24613 · Unknown · Jgraph/Drawio

Name of the Vulnerable Software and Affected Versions: jgraph/drawio versions prior to 18.1.3 Description: The issue is related to a Denial of Service in the GitHub repository jgraph/drawio. Recommendations: For versions prior to 18.1.3, update to version 18.1.3 or later to resolve the issue...