CVE-2022-3133

OS Command Injection in GitHub repository jgraph/drawio prior to 20.3.0.

Score

CVSS 3.1 7.8 High

Status

Modified - security@huntr.dev

Published

2022-09-09

Last modified

2024-08-03

Weaknesses

CWE-78

Affected products

• Drawio (Diagrams)
• Jgraphdrawio (Jgraph)

References

• https://github.com/jgraph/drawio/commit/8f3f95a05b701175b639ba9572dc4e0fb7c46b02
• https://huntr.dev/bounties/2d93052f-efc6-4647-9a6d-8b08dc251223