CVE-2022-1713: Diagrams Drawio

High severity, CVSS 7.5. EPSS: 9.6% chance of exploitation in the next 30 days.

SSRF on /proxy in GitHub repository jgraph/drawio prior to 18.0.4. An attacker can make a request as the server and read its contents. This can lead to a leak of sensitive information.

Affected products

• Diagrams Drawio: before 18.0.4 (fixed in 18.0.4)

Published 2022-05-16. Last modified 2026-06-17.