CVE-2023-3026: Cross-site Scripting (XSS) - Stored in jgraph/drawio
Published Jun 1, 2023
·Updated
Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 21.2.8.
Affected Software
1 affected component
Diagrams Drawio<21.2.8
Remediation
Event History
Jun 1, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
01:15 AM
DescriptionWeakness
Data Sourced
via NVD·01:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-3026?
CVE-2023-3026 is classified as a high-severity vulnerability due to its potential for exploitation via stored cross-site scripting (XSS).
2
How do I fix CVE-2023-3026?
To fix CVE-2023-3026, you should upgrade to version 21.2.8 or later of the Draw.io application.
3
What type of vulnerability is CVE-2023-3026?
CVE-2023-3026 is a stored cross-site scripting (XSS) vulnerability.
4
What applications are affected by CVE-2023-3026?
CVE-2023-3026 affects all versions of Draw.io prior to 21.2.8.
5
Can CVE-2023-3026 allow attackers to execute scripts?
Yes, CVE-2023-3026 can potentially allow attackers to execute arbitrary scripts in the context of another user’s session.