PT-2023-27096

CVE-2023-3974

Published

2023-07-27

Updated

2023-08-03

CVSS 3.1

9.6

Critical

MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions jgraph/drawio versions prior to 21.4.0

Description The issue is an OS Command Injection in the GitHub repository jgraph/drawio.

Recommendations For versions prior to 21.4.0, update to version 21.4.0 or later to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾