CVE-2023-3975
Assigner: @huntrdev
Published: 2023-07-27T14:34:10.847Z
State: PUBLISHED
title: OS Command Injection in jgraph/drawio
descriptions: value: OS Command Injection in GitHub repository jgraph/drawio prior to 21.5.0.
affected: vendor: jgraph
product: jgraph/drawio
versions: version: unspecified
lessThan: 21.5.0
status: affected
versionType: custom
metrics: cvssV3_0: version: 3.0
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
baseScore: 8.3
baseSeverity: HIGH
problemTypes: descriptions: type: CWE
description: CWE-78 Improper Neutralization of Special Elements used in an OS Command
cweId: CWE-78
source: advisory: 4da96d20-78ac-462e-910c-a14db9062161
discovery: EXTERNAL