← Database

CVE-2022-1575

CRITICAL CVSS: 9.6 Published: 2022-05-05 Modified: 2026-06-17

Description

Arbitrary Code Execution through Sanitizer Bypass in GitHub repository jgraph/drawio prior to 18.0.0. - Arbitrary (remote) code execution in the desktop app. - Stored XSS in the web app.

Affected Platforms

Diagrams Drawio

Weakness Type

CWE-94, CWE-79

References