187 matches found
CVE-2023-3398 Denial of Service in jgraph/drawio
Denial of Service in GitHub repository jgraph/drawio prior to 18.1.3...
CVE-2023-3398: Uncontrolled Resource Consumption
Denial of Service in GitHub repository jgraph/drawio prior to 18.1.3...
CVE-2023-3026
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 21.2.8...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 21.2.8...
CVE-2023-3026
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 21.2.8...
CVE-2023-3026 Cross-site Scripting (XSS) - Stored in jgraph/drawio
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 21.2.8...
CVE-2023-3026 Cross-site Scripting (XSS) - Stored in jgraph/drawio
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 21.2.8...
PT-2023-22610 · Jgraph · Jgraph/Drawio
Name of the Vulnerable Software and Affected Versions: jgraph/drawio versions prior to 21.2.8 Description: The issue is related to Cross-site Scripting XSS - Stored. This type of attack occurs when an application stores user input that contains malicious code, which is then executed by the...
CVE-2023-3026: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 21.2.8...
CVE-2023-3026 Cross-site Scripting (XSS) - Stored in jgraph/drawio
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 21.2.8...
CVE-2022-3873
Cross-site Scripting XSS - DOM in GitHub repository jgraph/drawio prior to 20.5.2...
UBUNTU-CVE-2022-3873
Cross-site Scripting XSS - DOM in GitHub repository jgraph/drawio prior to 20.5.2...
CVE-2022-3873
Cross-site Scripting XSS - DOM in GitHub repository jgraph/drawio prior to 20.5.2...
CVE-2022-3873 Cross-site Scripting (XSS) - DOM in jgraph/drawio
Cross-site Scripting XSS - DOM in GitHub repository jgraph/drawio prior to 20.5.2...
CVE-2022-3873
CVE-2022-3873 describes a DOM-based Cross-site Scripting (XSS) vulnerability in the Draw.io project (jgraph/drawio) affecting versions prior to 20.5.2. The available connected documents consistently identify the issue as a DOM XSS without detailing vendor-specific product configurations beyond th...
CVE-2022-3873: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - DOM in GitHub repository jgraph/drawio prior to 20.5.2...
CVE-2022-3223
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 20.3.1...
CVE-2022-3223
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 20.3.1...