Artfical
Security Intelligence
Türkçe
English
Deutsch
Français
Español
Русский
العربية
中文
日本語
한국어
Português
Italiano
فارسی
हिन्दी
Nederlands
Polski
Українська
Ελληνικά
Azərbaycan
Svenska
Indonesia
Tiếng Việt
ภาษาไทย
Română
Čeština
Magyar
עברית
Suomi
Norsk
Dansk
← Database
CVE-2022-3138
MEDIUM
CVSS:
6.1
Published: 2022-09-08
Modified: 2026-06-17
Description
Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0.
Affected Platforms
Diagrams Drawio
Weakness Type
CWE-79
References
https://github.com/jgraph/drawio/commit/b5dfeb238369d664fb06a95e2179236b0e75f366
https://huntr.dev/bounties/1816a207-6abf-408c-b19a-e497e24172b3
https://github.com/jgraph/drawio/commit/b5dfeb238369d664fb06a95e2179236b0e75f366
https://huntr.dev/bounties/1816a207-6abf-408c-b19a-e497e24172b3