CVE-2022-1721CWE-22

Path Traversal in WellKnownServlet in jgraph/drawio

High · published May 16, 2022

CVSS v3.0

7.5

EPSS

Percentile

82.9

In the wild

Unconfirmed

What it is

Path Traversal in WellKnownServlet in GitHub repository jgraph/drawio prior to 18.0.5. Read local files of the web application.

The record

Technical detail

CVSS v3.0: 7.5 · HIGH
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.02273 · 82.9th percentile
Weakness: CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published: 2022-05-16T14:31Z

EPSS history

Timeline