Skip to content

Known CVE

Drawio <18.0.4 - Server-Side Request Forgery

Drawio prior to 18.0.4 is vulnerable to server-side request forgery. An attacker can make a request as the server and read its contents. This can lead to a leak of sensitive information.

CVE-2022-1713

High2022CVSS 7.5CWE-918

cve2022 · drawio · ssrf · oss · huntr · diagrams · vuln

Verified scans run this check after you prove you own the site.

All known CVEsView the checks catalogNational Vulnerability Database

Scan a website