CVE-2022-3133

🗓️ 09 Sep 2022 17:55:09Reported by @huntrdevType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 109 Views

OS Command Injection in GitHub repo jgraph/drawio prior to 20.3.

Reporter	Title	Published	Views	Family All 14
Huntr	Desktop APP XSS to RCE	4 Sep 202220:16	–	huntr
attackerkb	CVE-2022-3133	9 Sep 202218:15	–	attackerkb
BDU FSTEC	The vulnerability of the drawio diagram-building software lies in the improper neutralization of special elements used in the OS command. This allows a hacker to execute arbitrary commands.	5 Dec 202400:00	–	bdu_fstec
Circl	CVE-2022-3133	9 Sep 202222:29	–	circl
CNNVD	JGraph draw.io 操作系统命令注入漏洞	9 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-3133 OS Command Injection in jgraph/drawio	9 Sep 202217:55	–	cvelist
EUVD	EUVD-2022-42560	3 Oct 202520:07	–	euvd
Mend	CVE-2022-3133	9 Sep 202217:55	–	mend
NVD	CVE-2022-3133	9 Sep 202218:15	–	nvd
Prion	Command injection	9 Sep 202218:15	–	prion

NVD

Vulners

Node

diagrams drawioRange<20.3.0

[
  {
    "product": "jgraph/drawio",
    "vendor": "jgraph",
    "versions": [
      {
        "lessThan": "20.3.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]