Skip to content
OpenAdvisories

Product · jgraph

jgraph/drawio

26 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 8.3
    CVE-2023-3975

    OS Command Injection in jgraph/drawio

    OS Command Injection in GitHub repository jgraph/drawio prior to 21.5.0.

    jgraph jgraph/drawio
  • High 7.0
    CVE-2022-3133

    OS Command Injection in jgraph/drawio

    OS Command Injection in GitHub repository jgraph/drawio prior to 20.3.0.

    jgraph jgraph/drawio
  • High 7.5
    CVE-2022-1784

    Server-Side Request Forgery (SSRF) in jgraph/drawio

    Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.8.

    jgraph jgraph/drawio
  • High 8.2
    CVE-2022-1774

    Exposure of Sensitive Information to an Unauthorized Actor in jgraph/drawio

    Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.0.7.

    jgraph jgraph/drawio
  • High 7.5
    CVE-2022-1767

    Server-Side Request Forgery (SSRF) in jgraph/drawio

    Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.7.

    jgraph jgraph/drawio
  • High 8.3
    CVE-2022-1727

    Improper Input Validation in jgraph/drawio

    Improper Input Validation in GitHub repository jgraph/drawio prior to 18.0.6.

    jgraph jgraph/drawio
  • High 7.5
    CVE-2022-1711 Scanner template

    Server-Side Request Forgery (SSRF) in jgraph/drawio

    Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.5.

    jgraph jgraph/drawio
  • High 7.5
    CVE-2022-1723

    Server-Side Request Forgery (SSRF) in jgraph/drawio

    Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.6.

    jgraph jgraph/drawio
  • High 7.5
    CVE-2022-1713 Scanner template

    SSRF on /proxy in jgraph/drawio

    SSRF on /proxy in GitHub repository jgraph/drawio prior to 18.0.4. An attacker can make a request as the server and read its contents. This can lead to a leak of sensitive information.

    jgraph jgraph/drawio
  • High 7.5
    CVE-2022-1721

    Path Traversal in WellKnownServlet in jgraph/drawio

    Path Traversal in WellKnownServlet in GitHub repository jgraph/drawio prior to 18.0.5. Read local files of the web application.

    jgraph jgraph/drawio
  • High 7.5
    CVE-2022-1722

    SSRF in editor's proxy via IPv6 link-local address in jgraph/drawio

    SSRF in editor's proxy via IPv6 link-local address in GitHub repository jgraph/drawio prior to 18.0.5. SSRF to internal link-local IPv6 addresses

    jgraph jgraph/drawio