high7.5
CVE-2022-1723
Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.6.
Impact
Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.6.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Diagrams | Drawio | before 18.0.6 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/jgraph/drawio/commit/7a68ebe22a64fe722704e9c4527791209fee2034
- https://huntr.dev/bounties/619851a4-2a08-4196-80e9-ab41953491d8
- https://github.com/jgraph/drawio/commit/7a68ebe22a64fe722704e9c4527791209fee2034
- https://huntr.dev/bounties/619851a4-2a08-4196-80e9-ab41953491d8