CVE-2022-1722

LOW CVSS: 3.3 Published: 2022-05-16 Modified: 2026-06-17

Description

SSRF in editor's proxy via IPv6 link-local address in GitHub repository jgraph/drawio prior to 18.0.5. SSRF to internal link-local IPv6 addresses

Affected Platforms

Diagrams Drawio

Weakness Type

CWE-918, CWE-918

References