Vulnerabilities > Diagrams

DATE CVE VULNERABILITY TITLE RISK
2022-05-17 CVE-2022-1711 Server-Side Request Forgery (SSRF) vulnerability in Diagrams Drawio
Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.5.
network
low complexity
diagrams CWE-918
7.5
7.5
2022-05-17 CVE-2022-1723 Server-Side Request Forgery (SSRF) vulnerability in Diagrams Drawio
Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.6.
network
low complexity
diagrams CWE-918
7.5
7.5
2022-05-16 CVE-2022-1713 Server-Side Request Forgery (SSRF) vulnerability in Diagrams Drawio
SSRF on /proxy in GitHub repository jgraph/drawio prior to 18.0.4.
network
low complexity
diagrams CWE-918
7.5
7.5
2022-05-16 CVE-2022-1721 Path Traversal vulnerability in Diagrams Drawio
Path Traversal in WellKnownServlet in GitHub repository jgraph/drawio prior to 18.0.5.
network
low complexity
diagrams CWE-22
7.5
7.5
2022-05-16 CVE-2022-1722 Server-Side Request Forgery (SSRF) vulnerability in Diagrams Drawio
SSRF in editor's proxy via IPv6 link-local address in GitHub repository jgraph/drawio prior to 18.0.5.
local
low complexity
diagrams CWE-918
3.3
3.3
2022-05-05 CVE-2022-1575 Cross-site Scripting vulnerability in Diagrams Drawio
Arbitrary Code Execution through Sanitizer Bypass in GitHub repository jgraph/drawio prior to 18.0.0.
network
low complexity
diagrams CWE-79
critical
 9.6
9.6