Beveiligingsadvies

CVE-2022-1713

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-05-16 14:31:52
Laatst bijgewerkt 2024-08-03 00:10:03
Toegewezen door @huntrdev
CVSS-score 7.5
Status PUBLISHED

Beschrijving

SSRF on /proxy in GitHub repository jgraph/drawio prior to 18.0.4. An attacker can make a request as the server and read its contents. This can lead to a leak of sensitive information.