Lucene search
@huntrdevCVELIST:CVE-2023-3973HistoryJul 27, 2023 - 2:33 p.m.
CVE-2023-3973 Cross-site Scripting (XSS) - Reflected in jgraph/drawio
2023-07-2714:33:11
CWE-79
@huntrdev
www.cve.org
4
cve-2023-3973
cross-site scripting
xss
reflected
jgraph/drawio
github repository
prior to 21.6.3
CVSS3
9.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
EPSS
0.001
Percentile
30.6%
Cross-site Scripting (XSS) - Reflected in GitHub repository jgraph/drawio prior to 21.6.3.
CNA Affected
[
{
"vendor": "jgraph",
"product": "jgraph/drawio",
"versions": [
{
"version": "unspecified",
"lessThan": "21.6.3",
"status": "affected",
"versionType": "custom"
}
]
}
]Related
osv
osv
CVE-2023-3973
2023-07-27 15:15:12
prion
prion
Cross site scripting
2023-07-27 15:15:00
huntr
huntr
XSS with CSP bypass leads to diagrams backdoor
2023-07-17 21:18:02
nvd
nvd
CVE-2023-3973
2023-07-27 15:15:12
cve
cve
CVE-2023-3973
2023-07-27 15:15:12
CVSS3
9.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
EPSS
0.001
Percentile
30.6%
Related for CVELIST:CVE-2023-3973