Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline

Diagrams Security Vulnerabilities

cve
cve

CVE-2022-1575

Arbitrary Code Execution through Sanitizer Bypass in GitHub repository jgraph/drawio prior to 18.0.0. - Arbitrary (remote) code execution in the desktop app. - Stored XSS in the web app.

9.6CVSS

9.3AI Score

0.002EPSS

2022-05-05 12:15 PM
63
14
cve
cve

CVE-2022-1711

Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.5.

7.5CVSS

7.6AI Score

0.001EPSS

2022-05-17 01:15 PM
53
2
cve
cve

CVE-2022-1713

SSRF on /proxy in GitHub repository jgraph/drawio prior to 18.0.4. An attacker can make a request as the server and read its contents. This can lead to a leak of sensitive information.

7.5CVSS

7.4AI Score

0.021EPSS

2022-05-16 03:15 PM
78
5
cve
cve

CVE-2022-1721

Path Traversal in WellKnownServlet in GitHub repository jgraph/drawio prior to 18.0.5. Read local files of the web application.

7.5CVSS

7.5AI Score

0.001EPSS

2022-05-16 03:15 PM
46
5
cve
cve

CVE-2022-1722

SSRF in editor's proxy via IPv6 link-local address in GitHub repository jgraph/drawio prior to 18.0.5. SSRF to internal link-local IPv6 addresses

3.3CVSS

4.1AI Score

0.0004EPSS

2022-05-16 03:15 PM
50
3
cve
cve

CVE-2022-1723

Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.6.

7.5CVSS

7.6AI Score

0.001EPSS

2022-05-17 09:15 AM
49
5
cve
cve

CVE-2022-1727

Improper Input Validation in GitHub repository jgraph/drawio prior to 18.0.6.

8.8CVSS

8.7AI Score

0.002EPSS

2022-05-18 02:15 PM
43
4
cve
cve

CVE-2022-1730

Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 18.0.4.

4.6CVSS

4.6AI Score

0.001EPSS

2022-05-19 02:15 PM
53
4
cve
cve

CVE-2022-1767

Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.7.

7.5CVSS

7.6AI Score

0.001EPSS

2022-05-18 04:15 PM
45
4
cve
cve

CVE-2022-1774

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.0.7.

6.1CVSS

6.2AI Score

0.001EPSS

2022-05-18 09:15 PM
52
10
cve
cve

CVE-2022-1784

Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.8.

7.5CVSS

7.6AI Score

0.001EPSS

2022-05-20 01:15 PM
46
cve
cve

CVE-2022-1815

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.1.2.

7.5CVSS

7.5AI Score

0.019EPSS

2022-05-25 09:15 AM
41
5
cve
cve

CVE-2022-2014

Code Injection in GitHub repository jgraph/drawio prior to 19.0.2.

5.4CVSS

5.8AI Score

0.001EPSS

2022-06-09 05:15 PM
24
cve
cve

CVE-2022-2015

Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 19.0.2.

5.4CVSS

5.3AI Score

0.001EPSS

2022-06-09 05:15 PM
21
2
cve
cve

CVE-2022-3065

Improper Access Control in GitHub repository jgraph/drawio prior to 20.2.8.

7.5CVSS

7.5AI Score

0.001EPSS

2022-09-02 07:15 PM
34
5
cve
cve

CVE-2022-3127

Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 20.2.8.

5.4CVSS

5.3AI Score

0.001EPSS

2022-09-05 01:15 PM
51
3
cve
cve

CVE-2022-3133

OS Command Injection in GitHub repository jgraph/drawio prior to 20.3.0.

7.8CVSS

7.9AI Score

0.001EPSS

2022-09-09 06:15 PM
35
7
cve
cve

CVE-2022-3138

Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0.

6.1CVSS

6AI Score

0.001EPSS

2022-09-08 10:15 AM
28
7
cve
cve

CVE-2022-3148

Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0.

6.1CVSS

6AI Score

0.001EPSS

2022-09-08 10:15 AM
27
5
cve
cve

CVE-2022-3223

Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 20.3.1.

6.1CVSS

6AI Score

0.001EPSS

2022-09-16 11:15 AM
34
6
cve
cve

CVE-2022-3873

Cross-site Scripting (XSS) - DOM in GitHub repository jgraph/drawio prior to 20.5.2.

6.1CVSS

6AI Score

0.001EPSS

2022-11-07 11:15 AM
26
4
cve
cve

CVE-2023-3026

Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 21.2.8.

6.1CVSS

6AI Score

0.001EPSS

2023-06-01 01:15 AM
84
cve
cve

CVE-2023-3398

Denial of Service in GitHub repository jgraph/drawio prior to 18.1.3.

7.5CVSS

6.2AI Score

0.001EPSS

2023-06-26 11:15 AM
106
cve
cve

CVE-2023-3973

Cross-site Scripting (XSS) - Reflected in GitHub repository jgraph/drawio prior to 21.6.3.

6.1CVSS

6.2AI Score

0.001EPSS

2023-07-27 03:15 PM
49
cve
cve

CVE-2023-3974

OS Command Injection in GitHub repository jgraph/drawio prior to 21.4.0.

9.8CVSS

9.7AI Score

0.001EPSS

2023-07-27 03:15 PM
58
cve
cve

CVE-2023-3975

OS Command Injection in GitHub repository jgraph/drawio prior to 21.5.0.

9.8CVSS

9.4AI Score

0.002EPSS

2023-07-27 03:15 PM
41