high7.8
CVE-2022-3133
OS Command Injection in GitHub repository jgraph/drawio prior to 20.3.0.
Impact
OS Command Injection in GitHub repository jgraph/drawio prior to 20.3.0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Diagrams | Drawio | before 20.3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/jgraph/drawio/commit/8f3f95a05b701175b639ba9572dc4e0fb7c46b02
- https://huntr.dev/bounties/2d93052f-efc6-4647-9a6d-8b08dc251223
- https://github.com/jgraph/drawio/commit/8f3f95a05b701175b639ba9572dc4e0fb7c46b02
- https://huntr.dev/bounties/2d93052f-efc6-4647-9a6d-8b08dc251223