3 matches found
CVE-2022-1727
Improper Input Validation in GitHub repository jgraph/drawio prior to 18.0.6...
8.8CVSS6.7AI score0.01373EPSS
SaveExploits1References1
CVE-2022-1727 Improper Input Validation in jgraph/drawio
Improper Input Validation in GitHub repository jgraph/drawio prior to 18.0.6...
8.3CVSS8.9AI score0.01373EPSS
SaveExploits1References2
CVE-2022-1727
CVE-2022-1727 affects the GitHub project jgraph/drawio prior to version 18.0.6. The root cause is improper input validation in the Electron desktop app’s link handling, allowing crafted links (e.g., via file: or other dangerous schemas) to be passed to shell.openExternal and potentially trigger c...
8.8CVSS8.7AI score0.01373EPSS
SaveExploits1References2Affected Software1
20