Unrated severityNVD Advisory· Published May 16, 2022· Updated Aug 3, 2024

SSRF on /proxy in jgraph/drawio

CVE-2022-1713

Description

SSRF on /proxy in GitHub repository jgraph/drawio prior to 18.0.4. An attacker can make a request as the server and read its contents. This can lead to a leak of sensitive information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Jgraph/Drawiollm-fuzzy
Range: <18.0.4
jgraph/jgraph/drawiov5
Range: unspecified

Patches

Vulnerability mechanics

References

github.com/jgraph/drawio/commit/283d41ec80ad410d68634245cf56114bc19331eemitrex_refsource_MISC
huntr.dev/bounties/cad3902f-3afb-4ed2-abd0-9f96a248de11mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.007
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000