High severity7.5NVD Advisory· Published May 16, 2022· Updated Jun 17, 2026

CVE-2022-1713

Description

SSRF on /proxy in GitHub repository jgraph/drawio prior to 18.0.4. An attacker can make a request as the server and read its contents. This can lead to a leak of sensitive information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Diagrams/Drawio
cpe:2.3:a:diagrams:drawio:*:*:*:*:*:*:*:*
Range: <18.0.4
GitHub/drawiollm-fuzzy
Range: <18.0.4
Jgraph/Drawiollm-fuzzy
Range: <18.0.4
jgraph/jgraph/drawiov5
Range: unspecified

Patches

Vulnerability mechanics

References

github.com/jgraph/drawio/commit/283d41ec80ad410d68634245cf56114bc19331eenvdPatchThird Party Advisory
huntr.dev/bounties/cad3902f-3afb-4ed2-abd0-9f96a248de11nvdExploitPatchThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.008
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000