CVE-2022-2014 Code Injection in jgraph/drawio
MediumCVSS 5.4
EPSS 0.75%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Code Injection in GitHub repository jgraph/drawio prior to 19.0.2.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jgraph/drawio | < 19.0.2 | 19.0.2 |
| diagrams drawio | < 19.0.2 | 19.0.2 |
References
- huntr.dev exploit third-party-advisory
- github.com patch third-party-advisory