CVE-2023-46321

2023-10-2300:15:08

Google

osv.dev

iterm2

vulnerability

cve-2023-46321

shell metacharacters

man command

0.001 Low

EPSS

Percentile

39.3%

JSON

iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize paths in x-man-page URLs. They may have shell metacharacters for a /usr/bin/man command line.

CPENameOperatorVersion
iterm2eq20190511-nightly
iterm2eq20181029-nightly
iterm2eq20200301-nightly
iterm2eq20201230-nightly
iterm2eq20181104-nightly
iterm2eq20190117-nightly
iterm2eq20200322-nightly
iterm2eq20211030-nightly
iterm2eq2.9.20160510
iterm2eq20191209-nightly

Name	Operator	Version
iterm2	eq	20190511-nightly
iterm2	eq	20181029-nightly
iterm2	eq	20200301-nightly
iterm2	eq	20201230-nightly
iterm2	eq	20181104-nightly
iterm2	eq	20190117-nightly
iterm2	eq	20200322-nightly
iterm2	eq	20211030-nightly
iterm2	eq	2.9.20160510
iterm2	eq	20191209-nightly