CVE-2022-1713
HIGH NUCLEIDiagrams Drawio < 18.0.4 - SSRF
Title source: ruleDescription
SSRF on /proxy in GitHub repository jgraph/drawio prior to 18.0.4. An attacker can make a request as the server and read its contents. This can lead to a leak of sensitive information.
Nuclei Templates (1)
Drawio <18.0.4 - Server-Side Request Forgery
HIGHVERIFIEDby pikpikcu
Shodan:
http.title:"Flowchart Maker" || http.title:"flowchart maker"
FOFA:
title="flowchart maker"
Scores
CVSS v3
7.5
EPSS
0.9018
EPSS Percentile
99.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-918
Status
published
Products (1)
diagrams/drawio
< 18.0.4
Published
May 16, 2022
Tracked Since
Feb 18, 2026