261 matches found
CVE-2022-3065
Improper Access Control in GitHub repository jgraph/drawio prior to 20.2.8...
CVE-2022-3065
Improper Access Control in GitHub repository jgraph/drawio prior to 20.2.8...
CVE-2022-3065 Improper Access Control in jgraph/drawio
Improper Access Control in GitHub repository jgraph/drawio prior to 20.2.8...
CVE-2022-3065 Improper Access Control in jgraph/drawio
Improper Access Control in GitHub repository jgraph/drawio prior to 20.2.8...
CVE-2022-3065
Improper Access Control in GitHub repository jgraph/drawio prior to 20.2.8...
CVE-2022-3065
CVE-2022-3065 corresponds to an Improper Access Control in the GitHub repository jgraph/drawio, affecting versions prior to 20.2.8. Multiple connected sources describe the issue as arising from inadequate access control tied to the proxy URL parameter, with no rate‑limiting, which could enable ab...
JGraph Draw.io security vulnerability
JGraph draw.io is a configurable chart/whiteboard visualization application from JGraph. A security vulnerability exists in JGraph draw.io versions prior to 20.2.8, which stems from the proxy url parameter not being rate-limited...
PT-2022-20226 · Unknown · Jgraph/Drawio
Name of the Vulnerable Software and Affected Versions: jgraph/drawio versions prior to 20.2.8 Description: The issue is related to improper access control in the GitHub repository jgraph/drawio. Recommendations: For versions prior to 20.2.8, update to version 20.2.8 or later to resolve the issue...
CVE-2022-3065: Improper Access Control
Improper Access Control in GitHub repository jgraph/drawio prior to 20.2.8...
CVE-2022-2015
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 19.0.2...
CVE-2022-2014
Code Injection in GitHub repository jgraph/drawio prior to 19.0.2...
CVE-2022-2015
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 19.0.2...
CVE-2022-2014
Code Injection in GitHub repository jgraph/drawio prior to 19.0.2...
JGraph Draw.io Cross-Site Script Vulnerability
JGraph draw.io is a configurable chart/whiteboard visualization application from JGraph. A security vulnerability exists in JGraph draw.io versions prior to 19.0.2 that stems from a cross-site scripting XSS issue...
JGraph Draw.io code injection vulnerability
JGraph draw.io is a configurable chart/whiteboard visualization application from JGraph. A security vulnerability exists in JGraph draw.io versions prior to 19.0.2 that stems from a code injection issue...
CVE-2022-2015
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 19.0.2...
CVE-2022-2015 Cross-site Scripting (XSS) - Stored in jgraph/drawio
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 19.0.2...
CVE-2022-2015 Cross-site Scripting (XSS) - Stored in jgraph/drawio
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 19.0.2...
CVE-2022-2015
CVE-2022-2015 affects jgraph/drawio prior to 19.0.2 with a stored XSS vulnerability. The issue is in the GitHub repository and requires upgrade to 19.0.2 or later to remediate. Exploit details are not provided in the connected documents.