CVE-2023-3975

概要

参考情報

• jgraph/drawio commit 8ec95cb · Patch
• huntr.dev/bounties/4da96d20-78ac-462e-910c-a14db9062161 · Exploit

drawio のその他の脆弱性

• CVE-2026-46642中 6.1draw.io is a configurable diagramming and whiteboarding application. Prior to version 29.7.12, a crafted .drawio file can execute arbitrary …
• CVE-2023-3974緊急 9.8OS Command Injection in GitHub repository jgraph/drawio prior to 21.4.0.
• CVE-2023-3973中 6.1Cross-site Scripting (XSS) - Reflected in GitHub repository jgraph/drawio prior to 21.6.3.
• CVE-2023-3398高 7.5Denial of Service in GitHub repository jgraph/drawio prior to 18.1.3.
• CVE-2023-3026中 6.1Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 21.2.8.