Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Draw Subscribe
Filtered by product Draw.io Diagrams
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-13127 2 Draw, Jgraph 2 Draw.io Diagrams, Mxgraph 2021-07-21 4.3 MEDIUM 6.1 MEDIUM
An issue was discovered in mxGraph through 4.0.0, related to the "draw.io Diagrams" plugin before 8.3.14 for Confluence and other products. Improper input validation/sanitization of a color field leads to XSS. This is associated with javascript/examples/grapheditor/www/js/Dialogs.js.