CVE-2022-3148

Cross-site Scripting XSS - Generic in GitHub repository jgraph/drawio prior to 20.3.0...

PT-2022-20755 · Drawio · Drawio

Name of the Vulnerable Software and Affected Versions: drawio versions prior to 20.3.0 Description: The issue is related to Cross-site Scripting XSS - Generic in the GitHub repository jgraph/drawio. Recommendations: For versions prior to 20.3.0, update to version 20.3.0 or later to resolve the...

JGraph draw.io 跨站脚本漏洞

JGraph draw.io is a configurable chart/whiteboard visualization application for JGraph. A cross-site scripting vulnerability exists in JGraph draw.io versions prior to 20.3.0, which stems from the application using a parameter to specify a url on the refresh and back buttons, assigning it to...