Diagrams vulnerabilities
We track 2 vulnerabilities in Diagrams products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 16, 2022.
2vulnerabilities
1critical
1high
0exploited
8.6average CVSS score
Latest Diagrams vulnerabilities
- 7.5 High severity
jgraph/drawio: Server-Side Request Forgery
SSRF on /proxy in GitHub repository jgraph/drawio prior to 18.0.4. An attacker can make a request as the server and read its contents. This can lead to a leak of sensitive information.
- 9.6 Critical severity
jgraph/drawio: Improper Neutralization of Input During Web Page Generation
Arbitrary Code Execution through Sanitizer Bypass in GitHub repository jgraph/drawio prior to 18.0.0. - Arbitrary (remote) code execution in the desktop app. - Stored XSS in the web app.