CVE-2022-3148

Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0.

Score

CVSS 3.1 6.1 Medium

Status

Modified - security@huntr.dev

Published

2022-09-08

Last modified

2024-08-03

Weaknesses

CWE-79

Affected products

• Drawio (Diagrams)
• Jgraphdrawio (Jgraph)

References

• https://github.com/jgraph/drawio/commit/b5dfeb238369d664fb06a95e2179236b0e75f366
• https://huntr.dev/bounties/1f730015-b4d0-4f84-8cac-9cf1e57a091a