131 matches found
JGraph draw.io 跨站脚本漏洞
JGraph draw.io is a configurable chart/whiteboard visualization application for JGraph. A cross-site scripting vulnerability exists in JGraph draw.io versions prior to 20.3.0, which stems from the application allowing the "use" tag to be passed to dompurify when "U" is imported before a "?" When...
CVE-2022-3127
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 20.2.8...
CVE-2022-3127
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 20.2.8...
CVE-2022-3127 Cross-site Scripting (XSS) - Stored in jgraph/drawio
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 20.2.8...
CVE-2022-3127 Cross-site Scripting (XSS) - Stored in jgraph/drawio
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 20.2.8...
PT-2022-20658 · Unknown · Jgraph/Drawio
Name of the Vulnerable Software and Affected Versions: jgraph/drawio versions prior to 20.2.8 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs in the GitHub repository jgraph/drawio. Recommendations: For versions prior to 20.2.8, update to version 20.2.8 or lat...
JGraph draw.io 跨站脚本漏洞
JGraph draw.io is a configurable chart/whiteboard visualization application for JGraph. A cross-site scripting vulnerability exists in JGraph draw.io prior to version 20.2.8...
CVE-2022-3065
Improper Access Control in GitHub repository jgraph/drawio prior to 20.2.8...
CVE-2022-3065
Improper Access Control in GitHub repository jgraph/drawio prior to 20.2.8...
CVE-2022-3065
CVE-2022-3065 corresponds to an Improper Access Control in the GitHub repository jgraph/drawio, affecting versions prior to 20.2.8. Multiple connected sources describe the issue as arising from inadequate access control tied to the proxy URL parameter, with no rate‑limiting, which could enable ab...
CVE-2022-3065 Improper Access Control in jgraph/drawio
Improper Access Control in GitHub repository jgraph/drawio prior to 20.2.8...
CVE-2022-3065 Improper Access Control in jgraph/drawio
Improper Access Control in GitHub repository jgraph/drawio prior to 20.2.8...
PT-2022-20226 · Unknown · Jgraph/Drawio
Name of the Vulnerable Software and Affected Versions: jgraph/drawio versions prior to 20.2.8 Description: The issue is related to improper access control in the GitHub repository jgraph/drawio. Recommendations: For versions prior to 20.2.8, update to version 20.2.8 or later to resolve the issue...
CVE-2022-2015
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 19.0.2...
CVE-2022-2015
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 19.0.2...
CVE-2022-2014
Code Injection in GitHub repository jgraph/drawio prior to 19.0.2...
JGraph draw.io 跨站脚本漏洞
JGraph draw.io is a configurable chart/whiteboard visualization application from JGraph. A security vulnerability exists in JGraph draw.io versions prior to 19.0.2 that stems from a cross-site scripting XSS issue...
CVE-2022-2015 Cross-site Scripting (XSS) - Stored in jgraph/drawio
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 19.0.2...