CVE-2023-3975

CVSS V2 None CVSS V3 None
Description
OS Command Injection in GitHub repository jgraph/drawio prior to 21.5.0.
Overview
  • CVE ID
  • CVE-2023-3975
  • Assigner
  • @huntrdev
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-07-27T14:34:10.847Z
  • Last Modified Date
  • 2023-07-27T14:34:10.847Z
Weakness Enumerations
CWE URL
CWE-78 http://cwe.mitre.org/data/definitions/78.html
References
Reference URL Reference Tags
https://huntr.dev/bounties/4da96d20-78ac-462e-910c-a14db9062161
https://github.com/jgraph/drawio/commit/8ec95cb03e0a80cf908a282522ac1651306db340
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-3975
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3975
History
Created Old Value New Value Data Type Notes
2024-06-24 20:21:06 Added to TrackCVE