mxGraph vulnerable to cross-site scripting in setTooltips function

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-40440 · ADVISORY
• SxB64/mxgraph-xss-vul · WEB
• jgraph/mxgraph · PACKAGE

mxgraph のその他の脆弱性

• CVE-2019-13127中 6.1An issue was discovered in mxGraph through 4.0.0, related to the "draw.io Diagrams" plugin before 8.3.14 for Confluence and other products. …
• CVE-2017-18197緊急 9.8In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert() is missing flags to prevent XML External …