← All advisories

Critical severity9.8NVD Advisory· Published Jul 27, 2023· Updated Jun 17, 2026

CVE-2023-3974

CVE-2023-3974

Description

OS Command Injection in GitHub repository jgraph/drawio prior to 21.4.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Diagrams/Drawio
cpe:2.3:a:diagrams:drawio:*:*:*:*:*:*:*:*
Range: <21.4.0
Jgraph/Drawiollm-fuzzy
Range: <21.4.0
jgraph/jgraph/drawiov5
Range: unspecified

Patches

Vulnerability mechanics

References

2

github.com/jgraph/drawio/commit/9d6532de36496e77d872d91b1947bb696607d623nvdPatch
huntr.dev/bounties/ce75aa04-e4d6-4e0a-9db0-ae84c46ae9e2nvdPermissions Required

News mentions

0

No linked articles in our index yet.