261 matches found
CVE-2023-3974 OS Command Injection in jgraph/drawio
OS Command Injection in GitHub repository jgraph/drawio prior to 21.4.0...
CVE-2023-3973 Cross-site Scripting (XSS) - Reflected in jgraph/drawio
Cross-site Scripting XSS - Reflected in GitHub repository jgraph/drawio prior to 21.6.3...
CVE-2023-3973 Cross-site Scripting (XSS) - Reflected in jgraph/drawio
Cross-site Scripting XSS - Reflected in GitHub repository jgraph/drawio prior to 21.6.3...
CVE-2023-3973
CVE-2023-3973 is a cross-site scripting (XSS) vulnerability reported as a reflected XSS in jgraph/drawio prior to version 21.6.3. Multiple sources in the connected set describe an XSS vector that can be triggered via user-controlled labels and plugin handling, including HTML decoding and injectio...
CVE-2023-3973 Cross-site Scripting (XSS) - Reflected in jgraph/drawio
Cross-site Scripting XSS - Reflected in GitHub repository jgraph/drawio prior to 21.6.3...
PT-2023-27087
Name of the Vulnerable Software and Affected Versions jgraph/drawio versions prior to 21.6.3 Description The issue is related to Cross-site Scripting XSS - Reflected. This means an attacker can inject malicious scripts into a website, which will then be executed by the user's browser. No...
JGraph draw.io operating system command injection vulnerability
JGraph draw.io is a configurable chart/whiteboard visualization application from JGraph. An operating system command injection vulnerability exists in JGraph draw.io versions prior to 21.4.0, which stems from vulnerability to operating system command injection attacks...
CVE-2023-3974: Improper Neutralization of Special Elements used in an OS Command
OS Command Injection in GitHub repository jgraph/drawio prior to 21.4.0...
JGraph Draw.io Cross-Site Script Vulnerability
JGraph draw.io is a configurable chart/whiteboard visualization application from JGraph. A cross-site scripting vulnerability exists in JGraph draw.io versions prior to 21.6.3 that stems from vulnerability to reflective cross-site scripting XSS attacks...
CVE-2023-3973: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Reflected in GitHub repository jgraph/drawio prior to 21.6.3...
PT-2023-27096
Name of the Vulnerable Software and Affected Versions jgraph/drawio versions prior to 21.4.0 Description The issue is an OS Command Injection in the GitHub repository jgraph/drawio. Recommendations For versions prior to 21.4.0, update to version 21.4.0 or later to resolve the issue...
PT-2023-27100
Name of the Vulnerable Software and Affected Versions jgraph/drawio versions prior to 21.5.0 Description The issue is an OS Command Injection in the GitHub repository jgraph/drawio. Recommendations For versions prior to 21.5.0, update to version 21.5.0 or later to resolve the issue...
JGraph draw.io operating system command injection vulnerability
JGraph draw.io is a configurable chart/whiteboard visualization application from JGraph. An operating system command injection vulnerability exists in JGraph draw.io versions prior to 21.5.0, which stems from vulnerability to operating system command injection attacks...
CVE-2023-3975: Improper Neutralization of Special Elements used in an OS Command
OS Command Injection in GitHub repository jgraph/drawio prior to 21.5.0...
CVE-2023-3398
Denial of Service in GitHub repository jgraph/drawio prior to 18.1.3...
Denial of service
Denial of Service in GitHub repository jgraph/drawio prior to 18.1.3...
CVE-2023-3398 Denial of Service in jgraph/drawio
Denial of Service in GitHub repository jgraph/drawio prior to 18.1.3...
CVE-2023-3398
CVE-2023-3398 affects the JGraph Drawio project. Affected software: drawio (GitHub repository jgraph/drawio) prior to version 18.1.3. Root cause and impact: a Denial of Service leads to degraded/blocked service when handling large uploads, with the observed impact described as DoS and confirmed b...
