CVE-2024-38396

2024-06-1621:15:50

[email protected]

web.nvd.nist.gov

iterm2

code injection

vulnerability

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.6%

JSON

An issue was discovered in iTerm2 3.5.x before 3.5.2. Unfiltered use of an escape sequence to report a window title, in combination with the built-in tmux integration feature (enabled by default), allows an attacker to inject arbitrary code into the terminal, a different vulnerability than CVE-2024-38395.