CVE-2022-2015

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 19.0.2.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
jgraphjgraph/drawio>= unspecified, < 19.0.2

References

Timeline

Published
Jun 9, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-201517.5Product: AndroidVersions: Android kernelAndroid ID: A-210712565References: N/ACVE-2022-201526.7In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege CVE-2022-201536.7In rcu_cblist_dequeue of rcu_segcblist.c, there is a possible use-after-free due to improper locking. This could lead to local escalation ofCVE-2022-201546.4In lock_sock_nested of sock.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege CVE-2022-201557.0In ipu_core_jqs_msg_transport_kernel_write_sync of ipu-core-jqs-msg-transport.c, there is a possible use-after-free due to a race condition.CVE-2022-201567.8In unflatten of GraphicBuffer.cpp, there is a possible arbitrary code execution due to improper input validation. This could lead to local eCVE-2022-201586.7In bdi_put and bdi_unregister of backing-dev.c, there is a possible memory corruption due to a use after free. This could lead to local escaCVE-2022-201594.4In asn1_ec_pkey_parse of acropora/crypto/asn1_common.c, there is a possible out of bounds read due to an incorrect bounds check. This could CVE-2022-20165.4Cross-site Scripting (XSS) - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.1.CVE-2022-201609.8Product: AndroidVersions: Android kernelAndroid ID: A-210083655References: N/ACVE-2022-201624.4In asn1_p256_int of crypto/asn1.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local informaCVE-2022-201649.8Product: AndroidVersions: Android kernelAndroid ID: A-204891956References: N/A
CVE-2022-2015: Medium severity, CVSS 5.4 | Vulnix