CVE-2023-3398

Description

References

• jgraph/drawio commit 064729f · Patch
• huntr.dev/bounties/aa087215-80e1-433d-b870-650705630e69 · Exploit

More vulnerabilities in drawio

• CVE-2026-46642MEDIUM 6.1draw.io is a configurable diagramming and whiteboarding application. Prior to version 29.7.12, a crafted .drawio file can execute arbitrary …
• CVE-2023-3975CRITICAL 9.8OS Command Injection in GitHub repository jgraph/drawio prior to 21.5.0.
• CVE-2023-3974CRITICAL 9.8OS Command Injection in GitHub repository jgraph/drawio prior to 21.4.0.
• CVE-2023-3973MEDIUM 6.1Cross-site Scripting (XSS) - Reflected in GitHub repository jgraph/drawio prior to 21.6.3.
• CVE-2023-3026MEDIUM 6.1Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 21.2.8.