CVE-2022-1713

🗓️ 16 May 2022 14:31:52Reported by @huntrdevType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 128 Views

CVE-2022-1713 SSRF on /proxy in GitHub repository jgraph/drawio prior to 18.0.4. An attacker can make a request as the server and read its contents. This can lead to a leak of sensitive information

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2022-1713	16 May 202215:15	–	attackerkb
Huntr	SSRF on /proxy	13 May 202201:30	–	huntr
Circl	CVE-2022-1713	16 May 202218:26	–	circl
CNNVD	JGraph draw.io 代码问题漏洞	16 May 202200:00	–	cnnvd
Cvelist	CVE-2022-1713 SSRF on /proxy in jgraph/drawio	16 May 202214:31	–	cvelist
Nuclei	Drawio <18.0.4 - Server-Side Request Forgery	6 Jun 202603:01	–	nuclei
NVD	CVE-2022-1713	16 May 202215:15	–	nvd
OSV	CVE-2022-1713 SSRF on /proxy in jgraph/drawio	16 May 202214:31	–	osv
Prion	Server side request forgery (ssrf)	16 May 202215:15	–	prion
Positive Technologies	PT-2022-14065 · Jgraph · Jgraph/Drawio	16 May 202200:00	–	ptsecurity

NVD

Node

diagrams drawioRange<18.0.4

[
  {
    "product": "jgraph/drawio",
    "vendor": "jgraph",
    "versions": [
      {
        "lessThan": "18.0.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]