← All advisories

Low severity3.3NVD Advisory· Published May 16, 2022· Updated Jun 17, 2026

CVE-2022-1722

CVE-2022-1722

Description

SSRF in editor's proxy via IPv6 link-local address in GitHub repository jgraph/drawio prior to 18.0.5. SSRF to internal link-local IPv6 addresses

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Diagrams/Drawio
cpe:2.3:a:diagrams:drawio:*:*:*:*:*:*:*:*
Range: <18.0.5
jgraph/jgraph/drawiov5
Range: unspecified
Jgraph/Drawiollm-fuzzy
Range: <18.0.5

Patches

Vulnerability mechanics

References

2

github.com/jgraph/drawio/commit/cf5c78aa0f3127fb10053db55b39f3017a0654aenvdPatchThird Party Advisory
huntr.dev/bounties/c903d563-ba97-44e9-b421-22bfab1e0cbdnvdExploitPatchThird Party Advisory

News mentions

0

No linked articles in our index yet.