Lucene search
Veracode Vulnerability DatabaseVERACODE:36205HistoryJun 29, 2022 - 6:01 p.m.
Information Disclosure
2022-06-2918:01:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.001 Low
EPSS
Percentile
30.2%
Mermaid is vulnerable to information disclosure. The vulnerability exists due to a css injection into the generated graph allowing for arbitrary graph modification leading to information disclosure by querying form data by css selectors.
Related
nvd
nvd
CVE-2022-31108
2022-06-28 19:15:09
cve
cve
CVE-2022-31108
2022-06-28 19:15:09
prion
prion
Cross site request forgery (csrf)
2022-06-28 19:15:00
osv
osv
Possible inject arbitrary `CSS` into the generated graph affecting the container HTML
2022-07-05 18:29:31
CVE-2022-31108
2022-06-28 19:15:09
debiancve
debiancve
CVE-2022-31108
2022-06-28 19:15:09
ubuntucve
ubuntucve
CVE-2022-31108
2022-06-28 00:00:00
cvelist
cvelist
github
github