Home

CVE-2022-1721

Description

Path Traversal in WellKnownServlet in GitHub repository jgraph/drawio prior to 18.0.5. Read local files of the web application.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
1.233

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in draw.io (MSI) (x64) 9.6.4Windows
Multiple Vulnerabilities are affected in Draw.io (x64) 9.6.4Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-351081Draw.io (MSI) (x64) (28.1.2)
PATCH-351082Draw.io (x64) (28.1.2)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234