CVE-2023-3974

CriticalCVSS 9.8

Published: 27/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.07%

60th percentile - higher than 60% of all known CVEs

There is an OS Command Injection vulnerability in the GitHub repository jgraph/drawio prior to version 21.4.0.

An attacker could exploit this vulnerability to execute arbitrary system commands, potentially leading to system compromise.

It is recommended to upgrade to version 21.4.0 or later to mitigate this vulnerability.

Original NVD description (English source)

OS Command Injection in GitHub repository jgraph/drawio prior to 21.4.0.