Skip to content

CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2022-3873

Cross-site Scripting (XSS) - DOM in jgraph/drawio

Read JSON ↗CVE.org ↗

Status: Published
Published: 2022-11-07
Updated: 2025-05-01
Assigning organization: @huntrdev

Description

Cross-site Scripting (XSS) - DOM in GitHub repository jgraph/drawio prior to 20.5.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

jgraph jgraph/drawio

unspecified to < 20.5.2affected

References