Skip to content
OpenAdvisories

Product · jgraph

jgraph/drawio

26 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 5.3
    CVE-2023-3398

    Denial of Service in jgraph/drawio

    Denial of Service in GitHub repository jgraph/drawio prior to 18.1.3.

    jgraph jgraph/drawio
  • Medium 6.5
    CVE-2023-3026

    Cross-site Scripting (XSS) - Stored in jgraph/drawio

    Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 21.2.8.

    jgraph jgraph/drawio
  • Medium 6.5
    CVE-2022-3873

    Cross-site Scripting (XSS) - DOM in jgraph/drawio

    Cross-site Scripting (XSS) - DOM in GitHub repository jgraph/drawio prior to 20.5.2.

    jgraph jgraph/drawio jgraph Ubuntu
  • Medium 4.3
    CVE-2022-3223

    Cross-site Scripting (XSS) - Stored in jgraph/drawio

    Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 20.3.1.

    jgraph jgraph/drawio
  • Medium 4.3
    CVE-2022-3138

    Cross-site Scripting (XSS) - Generic in jgraph/drawio

    Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0.

    jgraph jgraph/drawio
  • Medium 5.3
    CVE-2022-3148

    Cross-site Scripting (XSS) - Generic in jgraph/drawio

    Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0.

    jgraph jgraph/drawio
  • Medium 5.5
    CVE-2022-3127

    Cross-site Scripting (XSS) - Stored in jgraph/drawio

    Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 20.2.8.

    jgraph jgraph/drawio
  • Medium 5.3
    CVE-2022-3065

    Improper Access Control in jgraph/drawio

    Improper Access Control in GitHub repository jgraph/drawio prior to 20.2.8.

    jgraph jgraph/drawio
  • Medium 6.1
    CVE-2022-2015

    Cross-site Scripting (XSS) - Stored in jgraph/drawio

    Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 19.0.2.

    jgraph jgraph/drawio
  • Medium 5.3
    CVE-2022-1815

    Exposure of Sensitive Information to an Unauthorized Actor in jgraph/drawio

    Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.1.2.

    jgraph jgraph/drawio
  • Medium 6.3
    CVE-2022-1730

    Cross-site Scripting (XSS) - Stored in jgraph/drawio

    Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 18.0.4.

    jgraph jgraph/drawio