131 matches found
CVE-2022-3873
Cross-site Scripting XSS - DOM in GitHub repository jgraph/drawio prior to 20.5.2...
UBUNTU-CVE-2022-3873
Cross-site Scripting XSS - DOM in GitHub repository jgraph/drawio prior to 20.5.2...
CVE-2022-3873
CVE-2022-3873 describes a DOM-based Cross-site Scripting (XSS) vulnerability in the Draw.io project (jgraph/drawio) affecting versions prior to 20.5.2. The available connected documents consistently identify the issue as a DOM XSS without detailing vendor-specific product configurations beyond th...
CVE-2022-3873 Cross-site Scripting (XSS) - DOM in jgraph/drawio
Cross-site Scripting XSS - DOM in GitHub repository jgraph/drawio prior to 20.5.2...
CVE-2022-3223
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 20.3.1...
CVE-2022-3223
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 20.3.1...
CVE-2022-3223 Cross-site Scripting (XSS) - Stored in jgraph/drawio
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 20.3.1...
CVE-2022-3223 Cross-site Scripting (XSS) - Stored in jgraph/drawio
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 20.3.1...
JGraph draw.io 跨站脚本漏洞
JGraph draw.io is a configurable chart/whiteboard visualization application for JGraph. A cross-site scripting vulnerability exists in JGraph draw.io versions prior to 20.3.1. An attacker could exploit this vulnerability to perform cross-site scripting attacks...
CVE-2022-3133
OS Command Injection in GitHub repository jgraph/drawio prior to 20.3.0...
CVE-2022-3133 OS Command Injection in jgraph/drawio
OS Command Injection in GitHub repository jgraph/drawio prior to 20.3.0...
CVE-2022-3133
CVE-2022-3133 affects the jgraph/drawio project prior to 20.3.0. The issue is an OS command injection caused by improper neutralization of input data in command construction. The vulnerability is labeled as high risk (CVSS base score 7.8/NVD; 7.0 in some metrics) with a local attack vector and us...
CVE-2022-3138
Cross-site Scripting XSS - Generic in GitHub repository jgraph/drawio prior to 20.3.0...
CVE-2022-3148
Cross-site Scripting XSS - Generic in GitHub repository jgraph/drawio prior to 20.3.0...
CVE-2022-3148
Cross-site Scripting XSS - Generic in GitHub repository jgraph/drawio prior to 20.3.0...
Cross site scripting
Cross-site Scripting XSS - Generic in GitHub repository jgraph/drawio prior to 20.3.0...
CVE-2022-3138 Cross-site Scripting (XSS) - Generic in jgraph/drawio
Cross-site Scripting XSS - Generic in GitHub repository jgraph/drawio prior to 20.3.0...
CVE-2022-3148 Cross-site Scripting (XSS) - Generic in jgraph/drawio
Cross-site Scripting XSS - Generic in GitHub repository jgraph/drawio prior to 20.3.0...
CVE-2022-3148
CVE-2022-3148 describes a Cross-site Scripting (XSS) vulnerability in JGraph Draw.io (GitHub: jgraph/drawio) prior to version 20.3.0. The issue arises from how the application processes the use tag with dompurify, enabling an XSS payload to bypass CSP in some scenarios (e.g., a crafted SVG refere...