PT-2022-14074 · Unknown · Jgraph/Drawio

CVE-2022-1723

Published

2022-05-17

Updated

2022-06-07

CVSS v3.1

7.5

High

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions jgraph/drawio versions prior to 18.0.6

Description The issue is related to Server-Side Request Forgery (SSRF) in the GitHub repository jgraph/drawio.

Recommendations For versions prior to 18.0.6, update to version 18.0.6 or later to resolve the issue.

Exploit

Fix

SSRF

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2022-1723

Jgraph/Drawio