6 matches found
CVE-2022-3127
Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 20.2.8.
CVE-2022-3133
OS Command Injection in GitHub repository jgraph/drawio prior to 20.3.0.
CVE-2022-3065
Improper Access Control in GitHub repository jgraph/drawio prior to 20.2.8.
CVE-2022-3223
Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 20.3.1.
CVE-2022-3148
Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0.
CVE-2022-3138
Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0.