CVE-2022-3873

MEDIUM

Cross-site Scripting (XSS) - DOM in jgraph/drawio

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2022-3873 has a selected CVSS score of 6.1 (medium).

Description

Cross-site Scripting (XSS) - DOM in GitHub repository jgraph/drawio prior to 20.5.2.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated May 1, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

jgraph/drawio

Browse jgraph / jgraph/drawio
CVE ListBefore 20.5.2affected

References

3