CVE-2022-2014

Mô tả

Tham khảo

• jgraph/drawio commit 3d3f819 · Patch
• huntr.dev/bounties/911a4ada-7fd6-467a-a464-b88604b16ffc · Exploit

Lỗ hổng khác của drawio

• CVE-2026-46642TRUNG BÌNH 6.1draw.io is a configurable diagramming and whiteboarding application. Prior to version 29.7.12, a crafted .drawio file can execute arbitrary …
• CVE-2023-3975NGHIÊM TRỌNG 9.8OS Command Injection in GitHub repository jgraph/drawio prior to 21.5.0.
• CVE-2023-3974NGHIÊM TRỌNG 9.8OS Command Injection in GitHub repository jgraph/drawio prior to 21.4.0.
• CVE-2023-3973TRUNG BÌNH 6.1Cross-site Scripting (XSS) - Reflected in GitHub repository jgraph/drawio prior to 21.6.3.
• CVE-2023-3398CAO 7.5Denial of Service in GitHub repository jgraph/drawio prior to 18.1.3.