← All advisories

Medium severity6.1NVD Advisory· Published Jul 27, 2023· Updated Jun 17, 2026

CVE-2023-3973

CVE-2023-3973

Description

Cross-site Scripting (XSS) - Reflected in GitHub repository jgraph/drawio prior to 21.6.3.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Diagrams/Drawio
cpe:2.3:a:diagrams:drawio:*:*:*:*:*:*:*:*
Range: <21.6.3
GitHub/drawiollm-create
Range: <21.6.3
Jgraph/Drawiollm-fuzzy
Range: <21.6.3
jgraph/jgraph/drawiov5
Range: unspecified

Patches

Vulnerability mechanics

References

2

github.com/jgraph/drawio/commit/1db2c2c653aa245d175d30c210239e3946bfcb95nvdPatch
huntr.dev/bounties/4c1c5db5-210f-4d7e-8380-b95f88fdb78dnvdPermissions Required

News mentions

0

No linked articles in our index yet.