261 matches found
CVE-2022-2014
CVE-2022-2014 affects the jgraph/drawio project prior to 19.0.2. The connected sources describe a vulnerability in how diagram data is deserialized, enabling code injection via diagram content (notably unsafe deserialization of diagram elements and attributes), which can lead to client-side remot...
CVE-2022-2015: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 19.0.2...
Command execution vulnerability in JGraph drawio-desktop
drawio-desktop is an Electron-based diagramming and whiteboarding desktop application. A command execution vulnerability exists in JGraph drawio-desktop that can be exploited by an attacker to cause code execution...
PT-2022-14377
Name of the Vulnerable Software and Affected Versions jgraph/drawio versions prior to 19.0.2 Description The issue concerns a code injection problem in the jgraph/drawio GitHub repository. Recommendations For versions prior to 19.0.2, update to version 19.0.2 or later to resolve the issue...
CVE-2022-2014: Improper Control of Generation of Code
Code Injection in GitHub repository jgraph/drawio prior to 19.0.2...
PT-2022-14384
Name of the Vulnerable Software and Affected Versions jgraph/drawio versions prior to 19.0.2 Description The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input and later displays it without proper validation, allowing attackers to inject...
CVE-2022-1815
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.1.2...
CVE-2022-1815 Exposure of Sensitive Information to an Unauthorized Actor in jgraph/drawio
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.1.2...
CVE-2022-1815
Drawio (jgraph/drawio) prior to version 18.1.2 is affected by a server-side request forgery (SSRF) via the /service endpoint. The Nuclei template and related sources confirm an SSRF that could allow an attacker to obtain sensitive information, modify data, or perform unauthorized administrative a...
CVE-2022-1815
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.1.2...
CVE-2022-1815: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.1.2...
PT-2022-14134
Name of the Vulnerable Software and Affected Versions jgraph/drawio versions prior to 18.1.2 Description The issue concerns exposure of sensitive information to an unauthorized actor in the GitHub repository. Recommendations For versions prior to 18.1.2, update to version 18.1.2 or later to resol...
JGraph Draw.io code issues and vulnerabilities
JGraph draw.io is a configurable chart/whiteboard visualization application from JGraph. A security vulnerability exists in JGraph draw.io prior to version 18.1.2 that originates from exposing sensitive information to an unauthorized Actor...
JGraph draw.io Cross-Site Scripting Vulnerability
JGraph draw.io is a configurable charting/whiteboard visualization application for JGraph. versions prior to JGraph draw.io 18.0.4 contain a cross-site scripting vulnerability that stems from the program's lack of data validation filtering of user-supplied data and output. An attacker could explo...
CVE-2022-1784
Server-Side Request Forgery SSRF in GitHub repository jgraph/drawio prior to 18.0.8...
CVE-2022-1784
Server-Side Request Forgery SSRF in GitHub repository jgraph/drawio prior to 18.0.8...
Server side request forgery (ssrf)
Server-Side Request Forgery SSRF in GitHub repository jgraph/drawio prior to 18.0.8...
CVE-2022-1784 Server-Side Request Forgery (SSRF) in jgraph/drawio
Server-Side Request Forgery SSRF in GitHub repository jgraph/drawio prior to 18.0.8...
