Lucene search
@huntrdevCVELIST:CVE-2023-3975HistoryJul 27, 2023 - 2:34 p.m.
CVE-2023-3975 OS Command Injection in jgraph/drawio
2023-07-2714:34:10
CWE-78
@huntrdev
www.cve.org
3
cve-2023-3975
os command injection
jgraph/drawio
github repository
21.5.0
CVSS3
8.3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
AI Score
10
Confidence
High
EPSS
0.002
Percentile
55.4%
OS Command Injection in GitHub repository jgraph/drawio prior to 21.5.0.
CNA Affected
[
{
"vendor": "jgraph",
"product": "jgraph/drawio",
"versions": [
{
"version": "unspecified",
"lessThan": "21.5.0",
"status": "affected",
"versionType": "custom"
}
]
}
]Related
huntr
huntr
Desktop APP XSS to RCE
2023-06-15 13:14:27
cve
cve
CVE-2023-3975
2023-07-27 15:15:12
osv
osv
CVE-2023-3975
2023-07-27 15:15:12
nvd
nvd
CVE-2023-3975
2023-07-27 15:15:12
prion
prion
Command injection
2023-07-27 15:15:00
CVSS3
8.3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
AI Score
10
Confidence
High
EPSS
0.002
Percentile
55.4%
Related for CVELIST:CVE-2023-3975