Lucene search
PRIOn knowledge basePRION:CVE-2023-46322HistoryOct 23, 2023 - 12:15 a.m.
Code injection
2023-10-2300:15:00
PRIOn knowledge base
www.prio-n.com
3
code injection
iterm2
ssh
non-alphanumeric characters
security vulnerability
iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize ssh hostnames in URLs. The hostname’s initial character may be non-alphanumeric. The hostname’s other characters may be outside the set of alphanumeric characters, dash, and period.
| CPE | Name | Operator | Version |
|---|---|---|---|
| iterm2 | le | 3.4.21 | |
| iterm2 | eq | 3.5.0 beta1 | |
| iterm2 | eq | 3.5.0 beta10 | |
| iterm2 | eq | 3.5.0 beta2 | |
| iterm2 | eq | 3.5.0 beta3 | |
| iterm2 | eq | 3.5.0 beta4 | |
| iterm2 | eq | 3.5.0 beta5 | |
| iterm2 | eq | 3.5.0 beta6 | |
| iterm2 | eq | 3.5.0 beta7 | |
| iterm2 | eq | 3.5.0 beta8 |
Related
nvd
nvd
CVE-2023-46322
2023-10-23 00:15:08
cve
cve
CVE-2023-46322
2023-10-23 00:15:08
cvelist
cvelist
CVE-2023-46322
2023-10-22 00:00:00
osv
osv
CVE-2023-46322
2023-10-23 00:15:08