CVE-2022-1774

🗓️ 18 May 2022 20:40:10Reported by @huntrdevType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 104 Views

Exposure of Sensitive Information in jgraph/drawio GitHub repositor

Reporter	Title	Published	Views	Family All 11
Huntr	Leakage of third-party OAuth token via redirect	14 May 202219:29	–	huntr
attackerkb	CVE-2022-1774	18 May 202221:15	–	attackerkb
Circl	CVE-2022-1774	19 May 202200:28	–	circl
CNNVD	JGraph draw.io 输入验证错误漏洞	18 May 202200:00	–	cnnvd
Cvelist	CVE-2022-1774 Exposure of Sensitive Information to an Unauthorized Actor in jgraph/drawio	18 May 202220:40	–	cvelist
EUVD	EUVD-2022-25055	3 Oct 202520:07	–	euvd
NVD	CVE-2022-1774	18 May 202221:15	–	nvd
Prion	Design/Logic Flaw	18 May 202221:15	–	prion
Positive Technologies	PT-2022-14104 · Unknown · Jgraph/Drawio	18 May 202200:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2022-1774: Exposure of Sensitive Information to an Unauthorized Actor	18 May 202200:00	–	rapid7

NVD

Vulners

Node

diagrams drawioRange<18.0.7

[
  {
    "product": "jgraph/drawio",
    "vendor": "jgraph",
    "versions": [
      {
        "lessThan": "18.0.7",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]