JGraph draw.io 代码问题漏洞

JGraph draw.io is a configurable chart/whiteboard visualization application from JGraph. A security vulnerability exists in JGraph draw.io versions prior to 18.0.4. An attacker could exploit the vulnerability to make a request through the server and read its contents, which could lead to the...

CVE-2022-1722: Server-Side Request Forgery (SSRF)

SSRF in editor's proxy via IPv6 link-local address in GitHub repository jgraph/drawio prior to 18.0.5. SSRF to internal link-local IPv6 addresses...

CVE-2022-1713: Server-Side Request Forgery (SSRF)

SSRF on /proxy in GitHub repository jgraph/drawio prior to 18.0.4. An attacker can make a request as the server and read its contents. This can lead to a leak of sensitive information...

CVE-2022-1575

CVE-2022-1575 affects JGraph Draw.io (jgraph/drawio) including the desktop and web apps, due to a sanitizer bypass in the core library. The underlying issue is a mutation XSS in the sanitizer (Graph.sanitizeHtml), enabling arbitrary code execution in the desktop app and stored XSS in the web app....

JGraph draw.io 跨站脚本漏洞

JGraph draw.io is a configurable chart/whiteboard visualization application from JGraph. A cross-site scripting vulnerability exists in JGraph draw.io prior to version 18.0.0, which stems from the application's lack of filtering and escaping of user input. An attacker can exploit this vulnerabili...

CVE-2022-1575: Improper Control of Generation of Code

Arbitrary Code Execution through Sanitizer Bypass in GitHub repository jgraph/drawio prior to 18.0.0. - Arbitrary remote code execution in the desktop app. - Stored XSS in the web app...

[SECURITY] Fedora 26 Update: jgraphx-3.6.0.0-3.fc26

JGraphX is the a powerful, easy-to-use and feature-rich graph drawing component for Java. It is a rewrite of JGraph, also known as JGraph 6...