jgraph jgraph/drawio vulnerabilities
26 published CVEs name jgraph jgraph/drawio among the affected products.
- Published CVEs
- 26
- Last 12 months
- 0
- Critical
- 4
- Known exploited
- 0
Critical 4High 11Medium 11Low 0Not scored 0
CVEs per yearBy the year they were published
- 202221
- 20235
Newest CVEs
- CVE-2023-3975
OS Command Injection in jgraph/drawio
jgraph · jgraph/drawio
High8.3 - CVE-2023-3974
OS Command Injection in jgraph/drawio
jgraph · jgraph/drawio
Critical9.6 - CVE-2023-3973
Cross-site Scripting (XSS) - Reflected in jgraph/drawio
jgraph · jgraph/drawio
Critical9.6 - CVE-2023-3398
Denial of Service in jgraph/drawio
jgraph · jgraph/drawio
Medium5.3 - CVE-2023-3026
Cross-site Scripting (XSS) - Stored in jgraph/drawio
jgraph · jgraph/drawio
Medium6.5 - CVE-2022-3873
Cross-site Scripting (XSS) - DOM in jgraph/drawio
jgraph · jgraph/drawio
Medium6.5 - CVE-2022-3223
Cross-site Scripting (XSS) - Stored in jgraph/drawio
jgraph · jgraph/drawio
Medium4.3 - CVE-2022-3133
OS Command Injection in jgraph/drawio
jgraph · jgraph/drawio
High7.0 - CVE-2022-3138
Cross-site Scripting (XSS) - Generic in jgraph/drawio
jgraph · jgraph/drawio
Medium4.3 - CVE-2022-3148
Cross-site Scripting (XSS) - Generic in jgraph/drawio
jgraph · jgraph/drawio
Medium5.3
Most common weaknesses
- CWE-79 Cross-site scripting (XSS)10
- CWE-918 Server-side request forgery (SSRF)7
- CWE-78 OS command injection3
- CWE-200 Exposure of sensitive information2
- CWE-94 Code injection2
- CWE-20 Improper input validation1
- CWE-22 Path traversal1
- CWE-284 Improper access control1
- CWE-400 Uncontrolled resource consumption1
- CWE-601 Open redirect1