295 matches found
PT-2022-14104 · Unknown · Jgraph/Drawio
Name of the Vulnerable Software and Affected Versions: jgraph/drawio versions prior to 18.0.7 Description: The issue concerns exposure of sensitive information to an unauthorized actor. Recommendations: For versions prior to 18.0.7, update to version 18.0.7 or later to resolve the issue...
PT-2022-3218
Name of the Vulnerable Software and Affected Versions drawio versions prior to 18.0.8 Description The issue is related to insufficient validation of incoming requests in the url.openConnection function of the Embed2 servlet in the drawio diagram-building software. This can be exploited by a remot...
JGraph draw.io输入验证错误漏洞
JGraph draw.io is a configurable chart/whiteboard visualization application from JGraph. A security vulnerability exists in JGraph draw.io versions prior to 18.0.6 that stems from improper input validation...
CVE-2022-1774: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.0.7...
CVE-2022-1727: Improper Input Validation
Improper Input Validation in GitHub repository jgraph/drawio prior to 18.0.6...
CVE-2022-1767: Server-Side Request Forgery (SSRF)
Server-Side Request Forgery SSRF in GitHub repository jgraph/drawio prior to 18.0.7...
PT-2022-14099 · Unknown · Jgraph/Drawio
Name of the Vulnerable Software and Affected Versions: jgraph/drawio versions prior to 18.0.7 Description: The issue is related to Server-Side Request Forgery SSRF in the GitHub repository jgraph/drawio. SSRF is a type of attack where an attacker can trick a server into making requests to interna...
CVE-2022-1711
Server-Side Request Forgery SSRF in GitHub repository jgraph/drawio prior to 18.0.5...
CVE-2022-1711
Server-Side Request Forgery SSRF in GitHub repository jgraph/drawio prior to 18.0.5...
CVE-2022-1711
Draw.io (diagrams.net) prior to version 18.0.5 is affected by a Server-Side Request Forgery (SSRF) in the ProxyServlet. The vulnerability arises because URL validation is performed only on the initial url parameter; subsequent redirects can be followed without proper checks, enabling access to in...
CVE-2022-1711
Server-Side Request Forgery SSRF in GitHub repository jgraph/drawio prior to 18.0.5...
CVE-2022-1711 Server-Side Request Forgery (SSRF) in jgraph/drawio
Server-Side Request Forgery SSRF in GitHub repository jgraph/drawio prior to 18.0.5...
CVE-2022-1711 Server-Side Request Forgery (SSRF) in jgraph/drawio
Server-Side Request Forgery SSRF in GitHub repository jgraph/drawio prior to 18.0.5...
CVE-2022-1723
Server-Side Request Forgery SSRF in GitHub repository jgraph/drawio prior to 18.0.6...
CVE-2022-1723
Server-Side Request Forgery SSRF in GitHub repository jgraph/drawio prior to 18.0.6...
Server side request forgery (ssrf)
Server-Side Request Forgery SSRF in GitHub repository jgraph/drawio prior to 18.0.6...
CVE-2022-1723
Server-Side Request Forgery SSRF in GitHub repository jgraph/drawio prior to 18.0.6...
CVE-2022-1723
CVE-2022-1723 describes a Server-Side Request Forgery (SSRF) in the GitHub repository jgraph/drawio, affecting versions prior to 18.0.6. Multiple sources corroborate an SSRF vulnerability in the draw.io server component, with impact as described in CVE records. Affected software is the draw.io/se...