CVE-2022-1767

🗓️ 18 May 2022 15:45:11Reported by @huntrdevType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 88 Views

CVE-2022-1767 SSRF in GitHub repository jgraph/drawio prior to 18.0.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2022-1767	18 May 202216:15	–	attackerkb
Huntr	Server Side Request Forgery via location header	15 May 202212:39	–	huntr
Circl	CVE-2022-1767	18 May 202220:28	–	circl
CNNVD	JGraph draw.io 代码问题漏洞	18 May 202200:00	–	cnnvd
Cvelist	CVE-2022-1767 Server-Side Request Forgery (SSRF) in jgraph/drawio	18 May 202215:45	–	cvelist
EUVD	EUVD-2022-25048	3 Oct 202520:07	–	euvd
NVD	CVE-2022-1767	18 May 202216:15	–	nvd
Prion	Server side request forgery (ssrf)	18 May 202216:15	–	prion
Positive Technologies	PT-2022-14099 · Unknown · Jgraph/Drawio	18 May 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-1767	5 Feb 202523:05	–	redhatcve

NVD

Node

diagrams drawioRange<18.0.7

[
  {
    "product": "jgraph/drawio",
    "vendor": "jgraph",
    "versions": [
      {
        "lessThan": "18.0.7",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]