CVE-2022-1713

SSRF on /proxy in jgraph/drawio

Summary

Original description

The description as published by the source.

SSRF on /proxy in GitHub repository jgraph/drawio prior to 18.0.4. An attacker can make a request as the server and read its contents. This can lead to a leak of sensitive information.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
patch github.com
web huntr.dev

Metadata

CVE: CVE-2022-1713
Published: 2022-05-16
First seen on SecPulse: 4 years ago
First-seen source: OSV.dev (Open Source Vulnerabilities)

CWE

CWE-918

Detection sources

OSV.dev (Open Source Vulnerabilities) 2 months ago