CVE-2019-13127

An issue was discovered in mxGraph through 4.0.0, related to the "draw.io Diagrams" plugin before 8.3.14 for Confluence and other products

published July 1, 2019

CVSS
—
EPSS
2%
Percentile
74.1
In the wild
Unconfirmed
What it is

An issue was discovered in mxGraph through 4.0.0, related to the "draw.io Diagrams" plugin before 8.3.14 for Confluence and other products. Improper input validation/sanitization of a color field leads to XSS. This is associated with javascript/examples/grapheditor/www/js/Dialogs.js.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01503 · 74.1th percentile
Published
2019-07-01T14:33Z
EPSS history
Timeline
  • 01 JUL 14:33Z
    An issue was discovered in mxGraph through 4.0.0, related to the "draw.io Diagrams" plugin before 8.3.14 for Confluence and other products
    cvelistv5