CVE-2022-3148: Cross-site Scripting (XSS) - Generic in jgraph/drawio
Published Sep 8, 2022
·Updated
Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0.
Affected Software
1 affected component
Diagrams Drawio<20.3.0
Remediation
Event History
Sep 8, 2022
CVE Published
via MITRE·09:25 AM
Data Sourced
via MITRE·09:25 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-3148?
The severity of CVE-2022-3148 is medium.
2
What is the affected software for CVE-2022-3148?
The affected software for CVE-2022-3148 is Drawio version up to exclusive 20.3.0.
3
How can I fix CVE-2022-3148?
To fix CVE-2022-3148, you should update Drawio to version 20.3.0 or higher.
4
What is the CWE ID for CVE-2022-3148?
The CWE ID for CVE-2022-3148 is CWE-79.
5
Where can I find more information about CVE-2022-3148?
You can find more information about CVE-2022-3148 on GitHub at this [link](https://github.com/jgraph/drawio/commit/b5dfeb238369d664fb06a95e2179236b0e75f366) and on Huntr at this [link](https://huntr.dev/bounties/1f730015-b4d0-4f84-8cac-9cf1e57a091a).