Vulnerabilities > Diagrams > Drawio > 18.0.5

DATE CVE VULNERABILITY TITLE RISK
2022-05-18 CVE-2022-1774 Open Redirect vulnerability in Diagrams Drawio
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.0.7.
network
low complexity
diagrams CWE-601
6.1
2022-05-18 CVE-2022-1767 Server-Side Request Forgery (SSRF) vulnerability in Diagrams Drawio
Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.7.
network
low complexity
diagrams CWE-918
7.5
2022-05-18 CVE-2022-1727 Improper Input Validation vulnerability in Diagrams Drawio
Improper Input Validation in GitHub repository jgraph/drawio prior to 18.0.6.
network
low complexity
diagrams CWE-20
8.8
2022-05-17 CVE-2022-1723 Server-Side Request Forgery (SSRF) vulnerability in Diagrams Drawio
Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.6.
network
low complexity
diagrams CWE-918
5.0