diff --git a/cves/2022/CVE-2022-1713.yaml b/cves/2022/CVE-2022-1713.yaml index e575283202..c7f20c3990 100644 --- a/cves/2022/CVE-2022-1713.yaml +++ b/cves/2022/CVE-2022-1713.yaml @@ -1,11 +1,11 @@ id: CVE-2022-1713 info: - name: Drawio - SSRF on /proxy endpoint + name: Drawio <18.0.4 - Server-Side Request Forgery author: pikpikcu severity: high description: | - SSRF on /proxy in GitHub repository jgraph/drawio prior to 18.0.4. An attacker can make a request as the server and read its contents. This can lead to a leak of sensitive information. + Drawio prior to 18.0.4 is vulnerable to server-side request forgery. An attacker can make a request as the server and read its contents. This can lead to a leak of sensitive information. reference: - https://huntr.dev/bounties/cad3902f-3afb-4ed2-abd0-9f96a248de11 - https://nvd.nist.gov/vuln/detail/CVE-2022-1713 @@ -31,9 +31,11 @@ requests: - type: word part: body words: - - "Flowchart Maker & Online Diagram Software" + - "Flowchart Maker & Online Diagram Software" - type: word part: header words: - "application/octet-stream" + +# Enhanced by mp on 2022/06/29