CVE-2022-3127

Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 20.2.8.

Score

CVSS 3.0 5.5 Medium

Status

Modified - security@huntr.dev

Published

2022-09-05

Last modified

2024-08-03

Weaknesses

CWE-79

Affected products

• Drawio (Diagrams)
• Jgraphdrawio (Jgraph)

References

• https://github.com/jgraph/drawio/commit/59887e45b36f06c8dd4919a32bacd994d9f084da
• https://huntr.dev/bounties/6cea89d1-39dc-4023-82fa-821f566b841a