CVE-2022-3065

Improper Access Control in GitHub repository jgraph/drawio prior to 20.2.8.

Score

CVSS 3.1 7.5 High

Status

Modified - security@huntr.dev

Published

2022-09-02

Last modified

2024-08-03

Weaknesses

CWE-284

Affected products

• Drawio (Diagrams)
• Jgraphdrawio (Jgraph)

References

• https://github.com/jgraph/drawio/commit/59887e45b36f06c8dd4919a32bacd994d9f084da
• https://huntr.dev/bounties/5f3bc4b6-1d53-46b7-a23d-70f5faaf0c76