medium6.1
CVE-2022-3148
Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0.
Impact
Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Diagrams | Drawio | before 20.3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/jgraph/drawio/commit/b5dfeb238369d664fb06a95e2179236b0e75f366
- https://huntr.dev/bounties/1f730015-b4d0-4f84-8cac-9cf1e57a091a
- https://github.com/jgraph/drawio/commit/b5dfeb238369d664fb06a95e2179236b0e75f366
- https://huntr.dev/bounties/1f730015-b4d0-4f84-8cac-9cf1e57a091a