medium6.1
CVE-2022-3138
Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0.
Impact
Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Diagrams | Drawio | before 20.3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/jgraph/drawio/commit/b5dfeb238369d664fb06a95e2179236b0e75f366
- https://huntr.dev/bounties/1816a207-6abf-408c-b19a-e497e24172b3
- https://github.com/jgraph/drawio/commit/b5dfeb238369d664fb06a95e2179236b0e75f366
- https://huntr.dev/bounties/1816a207-6abf-408c-b19a-e497e24172b3