← All advisories

Critical severity9.8NVD Advisory· Published Jul 27, 2023· Updated Jun 17, 2026

CVE-2023-3975

CVE-2023-3975

Description

OS Command Injection in GitHub repository jgraph/drawio prior to 21.5.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Diagrams/Drawio
cpe:2.3:a:diagrams:drawio:*:*:*:*:*:*:*:*
Range: <21.5.0
Jgraph/Drawiollm-fuzzy
Range: <21.5.0
jgraph/jgraph/drawiov5
Range: unspecified

Patches

Vulnerability mechanics

References

2

github.com/jgraph/drawio/commit/8ec95cb03e0a80cf908a282522ac1651306db340nvdPatch
huntr.dev/bounties/4da96d20-78ac-462e-910c-a14db9062161nvdExploitPatchPermissions RequiredThird Party Advisory

News mentions

0

No linked articles in our index yet.