CVE-2022-1711

HIGHNuclei

Server-Side Request Forgery (SSRF) in jgraph/drawio

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2022-1711 has a selected CVSS score of 7.5 (high); EIP currently links 1 Nuclei template.

Description

Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.5.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

jgraph/drawio

Browse jgraph / jgraph/drawio
CVE ListBefore 18.0.5affected

Nuclei templates

1
ProjectDiscoveryHIGHdraw.io < 18.0.5 - Server Side Request Forgery (SSRF)CVSS 7.5

Server-Side Request Forgery (SSRF) vulnerability in draw.io (also known as diagrams.net) prior to version 18.0.5 allows attackers to bypass URL validation restrictions in the ProxyServlet component. The vulnerability exists because the application does not properly validate URLs passed to its proxy endpoint, allowing attackers to make requests to internal services or external servers. This can lead to unauthorized access to internal resources and potential data exfiltration.

Impact

Unauthenticated attackers can perform SSRF attacks via the proxy endpoint to access internal resources, scan internal networks, or retrieve sensitive data from internal systems.

Remediation

Update to draw.io/diagrams.net version 18.0.5 or later. The patch adds isLinkLocalAddress() checks to restrict proxy request destinations. If patching isn't possible, implement network controls to limit server connections to internal systems.

WeaknessesCWE-918
Authorsritikchaddha
Template tagscvecve2022ssrfdrawiodiagramsjgraphvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Shodan: html:"draw.io"
FOFA: body="draw.io"
https://huntr.dev/bounties/c32afff5-6ad5-4d4d-beea-f55ab4925797 https://github.com/jgraph/drawio/commit/cf5c78aa0f3127fb10053db55b39f3017a0654ae https://nvd.nist.gov/vuln/detail/CVE-2022-1711

Source: ProjectDiscovery

References

3