CVE-2023-3398

Denial of Service in GitHub repository jgraph/drawio prior to 18.1.3.
Configurations

Configuration 1 (hide)

cpe:2.3:a:diagrams:drawio:*:*:*:*:*:*:*:*

History

21 Nov 2024, 08:17

Type Values Removed Values Added
References () https://github.com/jgraph/drawio/commit/064729fec4262f9373d9fdcafda0be47cd18dd50 - Patch () https://github.com/jgraph/drawio/commit/064729fec4262f9373d9fdcafda0be47cd18dd50 - Patch
References () https://huntr.dev/bounties/aa087215-80e1-433d-b870-650705630e69 - Exploit, Patch, Third Party Advisory () https://huntr.dev/bounties/aa087215-80e1-433d-b870-650705630e69 - Exploit, Patch, Third Party Advisory

30 Jun 2023, 13:01

Type Values Removed Values Added
First Time Diagrams drawio
Diagrams
CPE cpe:2.3:a:diagrams:drawio:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5
References (MISC) https://huntr.dev/bounties/aa087215-80e1-433d-b870-650705630e69 - (MISC) https://huntr.dev/bounties/aa087215-80e1-433d-b870-650705630e69 - Exploit, Patch, Third Party Advisory
References (MISC) https://github.com/jgraph/drawio/commit/064729fec4262f9373d9fdcafda0be47cd18dd50 - (MISC) https://github.com/jgraph/drawio/commit/064729fec4262f9373d9fdcafda0be47cd18dd50 - Patch

26 Jun 2023, 11:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-06-26 11:15

Updated : 2024-11-21 08:17


NVD link : CVE-2023-3398

Mitre link : CVE-2023-3398

CVE.ORG link : CVE-2023-3398


JSON object : View

Products Affected

diagrams

  • drawio
CWE
CWE-400

Uncontrolled Resource Consumption