CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

NVD•added 2022/11/07 11:15 a.m.•22 views

CVE-2022-3873

Cross-site Scripting XSS - DOM in GitHub repository jgraph/drawio prior to 20.5.2...

6.5CVSS0.00624EPSS

Exploits1References2

Vulnrichment•added 2022/11/07 12:0 a.m.•10 views

CVE-2022-3873 Cross-site Scripting (XSS) - DOM in jgraph/drawio

Cross-site Scripting XSS - DOM in GitHub repository jgraph/drawio prior to 20.5.2...

6.5CVSS6.1AI score0.00624EPSS

Exploits1References2

UbuntuCve•added 2022/11/07 12:0 a.m.•24 views

CVE-2022-3873

Cross-site Scripting XSS - DOM in GitHub repository jgraph/drawio prior to 20.5.2...

6.5CVSS6.6AI score0.00624EPSS

Exploits1References3

Cvelist•added 2022/11/07 12:0 a.m.•26 views

CVE-2022-3873 Cross-site Scripting (XSS) - DOM in jgraph/drawio

Cross-site Scripting XSS - DOM in GitHub repository jgraph/drawio prior to 20.5.2...

6.5CVSS6.2AI score0.00624EPSS

Exploits1References2

CVE•added 2022/11/07 12:0 a.m.•51 views

CVE-2022-3873

CVE-2022-3873 describes a DOM-based Cross-site Scripting (XSS) vulnerability in the Draw.io project (jgraph/drawio) affecting versions prior to 20.5.2. The available connected documents consistently identify the issue as a DOM XSS without detailing vendor-specific product configurations beyond th...

6.5CVSS6AI score0.00624EPSS

Exploits1References2Affected Software1