261 matches found
Drawio <18.1.2 - Server-Side Request Forgery
Drawio before 18.1.2 is susceptible to server-side request forgery via the /service endpoint in jgraph/drawio. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. id: CVE-2022-1815 info: nam...
draw.io < 18.0.5 - Server Side Request Forgery (SSRF)
Server-Side Request Forgery SSRF vulnerability in draw.io also known as diagrams.net prior to version 18.0.5 allows attackers to bypass URL validation restrictions in the ProxyServlet component. The vulnerability exists because the application does not properly validate URLs passed to its proxy...
Drawio <18.1.2 - Server-Side Request Forgery Detection
Drawio before 18.1.2 is susceptible to server-side request forgery via the /service endpoint in jgraph/drawio. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. !/usr/bin/env python3 --...
WS-2023-0211
Cross-site Scripting in Preview function bypass CSP in GitHub repository jgraph/drawio prior to 21.3.1...
WS-2022-0358
In jgraph/drawio prior to 20.4.2, it is possible to partially interrupt the proxy in the backend by redirecting to the same URL again. This may lead to Denial of Service in proxy by redirecting to own host. This vulnerability is capable of interrupting the proxy service for other users...
EUVD-2023-43718
Malicious code in bioql PyPI...
EUVD-2023-44598
Malicious code in bioql PyPI...
EUVD-2023-44600
Malicious code in bioql PyPI...
EUVD-2022-42554
Malicious code in bioql PyPI...
EUVD-2022-34320
Malicious code in bioql PyPI...
EUVD-2022-25004
Malicious code in bioql PyPI...
EUVD-2022-42560
Malicious code in bioql PyPI...
EUVD-2022-42636
Malicious code in bioql PyPI...
EUVD-2022-25005
Malicious code in bioql PyPI...
EUVD-2022-25008
Malicious code in bioql PyPI...
EUVD-2022-25003
Malicious code in bioql PyPI...
EUVD-2022-42496
Malicious code in bioql PyPI...
EUVD-2022-25064
Malicious code in bioql PyPI...