.. / CVE-2022-1713

• SSRF
• Nuclei
• Web

Exploit for Drawio <18.0.4 - Server-Side Request Forgery (CVE-2022-1713)

Description:

Drawio prior to 18.0.4 is vulnerable to server-side request forgery. An attacker can make a request as the server and read its contents. This can lead to a leak of sensitive information.

Nuclei Template

View the template here CVE-2022-1713.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-1713.yaml

References: