Read the docs

plantuml

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

plantuml records in CISA KEV

No plantuml vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Plantuml 5 records MEDIUM

Records

5 records

TI-2023-03207 CVE-2023-3432 · GHSA-ff3m-68vj-h86p

Server-Side Request Forgery (SSRF) in plantuml/plantuml

Priority MEDIUM 44

Server-Side Request Forgery (SSRF) in GitHub repository plantuml/plantuml prior to 1.2023.9.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0087 Published 2023-06-27 Fixed in 1.2023.9 CWE-918
TI-2022-01260 CVE-2022-1379 · GHSA-8qqf-jx6g-2rcv

URL Restriction Bypass in plantuml/plantuml

Priority MEDIUM 43

URL Restriction Bypass in GitHub repository plantuml/plantuml prior to V1.2022.5.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01617 Published 2022-05-14 Fixed in V1.2022.5 CWE-918
TI-2023-03206 CVE-2023-3431 · GHSA-p2mf-q26j-3xmh

Improper Access Control in plantuml/plantuml

Priority LOW 26

Improper Access Control in GitHub repository plantuml/plantuml prior to 1.2023.9.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00866 Published 2023-06-27 Fixed in 1.2023.9 CWE-284
TI-2026-00639 CVE-2026-0858 · GHSA-hrvf-g648-rf3m

Cross-site scripting in net.sourceforge.plantuml:plantuml

Priority LOW 23

Versions of the package net.sourceforge.plantuml:plantuml before 1.2026.0 are vulnerable to Stored XSS due to insufficient sanitization of interactive attributes in GraphViz diagrams.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00338 Published 2026-01-16 Partial fix · 1.2026.0 CWE-79
Open these records in search →