Vulnerabilities in jgraph

28 results
Vexday analysis

JGraph acumula 28 vulnerabilidades na base, com 4 classificadas como críticas, sendo a injeção de código (CWE-79) o padrão dominante; nenhuma está sob exploração ativa conhecida, mas 2 vulnerabilidades foram publicadas nos últimos 90 dias, indicando risco recente que demanda monitoramento contínuo.

CVE-2022-1713HIGHSSRF on /proxy in jgraph/drawioEPSS 9.6%CVE-2022-1711HIGHServer-Side Request Forgery (SSRF) in jgraph/drawioEPSS 5.9%CVE-2022-1815MEDIUMExposure of Sensitive Information to an Unauthorized Actor in jgraph/drawioEPSS 5.4%CVE-2023-3975HIGHOS Command Injection in jgraph/drawioEPSS 2.3%CVE-2022-1575CRITICALArbitrary Code Execution through Sanitizer Bypass in jgraph/drawioEPSS 2.2%CVE-2022-1721HIGHPath Traversal in WellKnownServlet in jgraph/drawioEPSS 2.2%CVE-2022-1767HIGHServer-Side Request Forgery (SSRF) in jgraph/drawioEPSS 1.8%CVE-2022-1784HIGHServer-Side Request Forgery (SSRF) in jgraph/drawioEPSS 1.8%CVE-2022-1723HIGHServer-Side Request Forgery (SSRF) in jgraph/drawioEPSS 1.7%CVE-2022-1727HIGHImproper Input Validation in jgraph/drawioEPSS 1.4%CVE-2022-3133HIGHOS Command Injection in jgraph/drawioEPSS 1.3%CVE-2023-3974CRITICALOS Command Injection in jgraph/drawioEPSS 1.2%CVE-2022-1774HIGHExposure of Sensitive Information to an Unauthorized Actor in jgraph/drawioEPSS 1.2%CVE-2022-3065MEDIUMImproper Access Control in jgraph/drawioEPSS 1.0%CVE-2023-3398MEDIUMDenial of Service in jgraph/drawioEPSS 1.0%CVE-2022-2014CRITICALCode Injection in jgraph/drawioEPSS 0.7%CVE-2022-3223MEDIUMCross-site Scripting (XSS) - Stored in jgraph/drawioEPSS 0.7%CVE-2022-3873MEDIUMCross-site Scripting (XSS) - DOM in jgraph/drawioEPSS 0.6%CVE-2022-2015MEDIUMCross-site Scripting (XSS) - Stored in jgraph/drawioEPSS 0.6%CVE-2022-1730MEDIUMCross-site Scripting (XSS) - Stored in jgraph/drawioEPSS 0.6%