Stored XSS on drawio in jgraph/drawio
May 15th 2022
Steps to reproduce
- Create a text box and set word size to 50
- Click with the rigth button and "Edit link"
- Put asdf://test.com
- Click with the rigth button again and "Edit data"
- Export the page as URL
- Click on the link
It also affects confluence as its available as an app on the marketplace, POC video: https://youtu.be/RHevZOx1nhc