Vulnerabilities > Diagrams > Drawio > 21.2.7

DATE CVE VULNERABILITY TITLE RISK
2023-07-27 CVE-2023-3973 Cross-site Scripting vulnerability in Diagrams Drawio
Cross-site Scripting (XSS) - Reflected in GitHub repository jgraph/drawio prior to 21.6.3.
network
low complexity
diagrams CWE-79
6.1
6.1
2023-07-27 CVE-2023-3974 OS Command Injection vulnerability in Diagrams Drawio
OS Command Injection in GitHub repository jgraph/drawio prior to 21.4.0.
network
low complexity
diagrams CWE-78
critical
 9.8
9.8
2023-07-27 CVE-2023-3975 OS Command Injection vulnerability in Diagrams Drawio
OS Command Injection in GitHub repository jgraph/drawio prior to 21.5.0.
network
low complexity
diagrams CWE-78
critical
 9.8
9.8