CVE-2023-3398

Description

References

• jgraph/drawio commit 064729f · Patch
• huntr.dev/bounties/aa087215-80e1-433d-b870-650705630e69 · Exploit

Altre vulnerabilità di drawio

• CVE-2026-46642MEDIO 6.1draw.io is a configurable diagramming and whiteboarding application. Prior to version 29.7.12, a crafted .drawio file can execute arbitrary …
• CVE-2023-3975CRITICO 9.8OS Command Injection in GitHub repository jgraph/drawio prior to 21.5.0.
• CVE-2023-3974CRITICO 9.8OS Command Injection in GitHub repository jgraph/drawio prior to 21.4.0.
• CVE-2023-3973MEDIO 6.1Cross-site Scripting (XSS) - Reflected in GitHub repository jgraph/drawio prior to 21.6.3.
• CVE-2023-3026MEDIO 6.1Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 21.2.8.