PT-2022-14077 · Unknown · Jgraph/Drawio

CVE-2022-1727

Published

2022-05-18

Updated

2023-02-16

CVSS v3.1

8.3

High

Vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions jgraph/drawio versions prior to 18.0.6

Description The issue is related to improper input validation in the GitHub repository jgraph/drawio.

Recommendations For versions prior to 18.0.6, update to version 18.0.6 or later to resolve the issue.

Exploit

Fix

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2022-1727

Jgraph/Drawio