CVE-2023-3973

CVSS V2 None CVSS V3 None
Description
Cross-site Scripting (XSS) - Reflected in GitHub repository jgraph/drawio prior to 21.6.3.
Overview
  • CVE ID
  • CVE-2023-3973
  • Assigner
  • @huntrdev
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-07-27T14:33:11.271Z
  • Last Modified Date
  • 2023-07-27T14:33:11.271Z
Weakness Enumerations
CWE URL
CWE-79 http://cwe.mitre.org/data/definitions/79.html
References
Reference URL Reference Tags
https://huntr.dev/bounties/4c1c5db5-210f-4d7e-8380-b95f88fdb78d
https://github.com/jgraph/drawio/commit/1db2c2c653aa245d175d30c210239e3946bfcb95
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-3973
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3973
History
Created Old Value New Value Data Type Notes
2024-06-24 20:41:53 Added to TrackCVE