Path Traversal in WellKnownServlet in GitHub repository jgraph/drawio prior to 18.0.5. Read local files of the web application.
References
Link | Resource |
---|---|
https://github.com/jgraph/drawio/commit/01ccb271d34258872b859c0fc1d253cc81341917 | Patch Third Party Advisory |
https://huntr.dev/bounties/000931cc-6d0e-4a4f-b4d8-4ba46ba0e699 | Exploit Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: @huntrdev
Published: 2022-05-16T14:31:26
Updated: 2022-05-16T14:31:26
Reserved: 2022-05-15T00:00:00
Link: CVE-2022-1721
JSON object: View
NVD Information
Status : Analyzed
Published: 2022-05-16T15:15:10.243
Modified: 2023-02-16T18:11:22.660
Link: CVE-2022-1721
JSON object: View
Redhat Information
No data.
CWE