Skip to content
CVE PROGRAM SOURCE RECORD9.6 Critical

CVE-2022-1575

Arbitrary Code Execution through Sanitizer Bypass in jgraph/drawio

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
@huntrdev

Description

Arbitrary Code Execution through Sanitizer Bypass in GitHub repository jgraph/drawio prior to 18.0.0. - Arbitrary (remote) code execution in the desktop app. - Stored XSS in the web app.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

jgraph jgraph/drawio

  • unspecified to < 18.0.0affected

References