Lucene search
@huntrdevCVELIST:CVE-2022-3133HistorySep 09, 2022 - 5:55 p.m.
CVE-2022-3133 OS Command Injection in jgraph/drawio
2022-09-0917:55:09
CWE-78
@huntrdev
www.cve.org
5
cve-2022-3133 command injection github repository jgraph/drawio
CVSS3
7
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
39.5%
OS Command Injection in GitHub repository jgraph/drawio prior to 20.3.0.
CNA Affected
[
{
"product": "jgraph/drawio",
"vendor": "jgraph",
"versions": [
{
"lessThan": "20.3.0",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
prion
prion
Command injection
2022-09-09 18:15:00
nvd
nvd
CVE-2022-3133
2022-09-09 18:15:10
huntr
huntr
Desktop APP XSS to RCE
2022-09-04 20:16:47
cve
cve
CVE-2022-3133
2022-09-09 18:15:10
osv
osv
CVE-2022-3133
2022-09-09 18:15:10
CVSS3
7
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
39.5%
Related for CVELIST:CVE-2022-3133