Vulnerabilities (CVE)

Filtered by vendor Diagrams Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-2015 1 Diagrams 1 Drawio 2022-06-15 3.5 LOW 5.4 MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 19.0.2.
CVE-2022-2014 1 Diagrams 1 Drawio 2022-06-15 3.5 LOW 5.4 MEDIUM
Code Injection in GitHub repository jgraph/drawio prior to 19.0.2.
CVE-2022-1774 1 Diagrams 1 Draw.io 2022-05-26 5.8 MEDIUM 6.1 MEDIUM
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.0.7.