CVE-2023-3975

CriticalCVSS 9.8

Published: 27/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

1.94%

77th percentile - higher than 77% of all known CVEs

There is an OS Command Injection vulnerability in the GitHub repository jgraph/drawio prior to version 21.5.0.

An attacker could exploit this vulnerability to execute arbitrary system commands, potentially leading to system compromise.

It is recommended to upgrade to version 21.5.0 or later to mitigate this vulnerability.

Original NVD description (English source)

OS Command Injection in GitHub repository jgraph/drawio prior to 21.5.0.