4 matches found
CVE-2023-46321
iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize paths in x-man-page URLs. They may have shell metacharacters for a /usr/bin/man command line...
7.1AI score0.00656EPSS
SaveExploits0References2
CVE-2023-46321
CVE-2023-46321 affects iTerm2, specifically the iTermSessionLauncher.m component, where paths in x-man-page URLs are not sanitized. This allows shell metacharacters to reach a /usr/bin/man command line, enabling a potentially dangerous injection path as described in multiple sources. The NVD entr...
9.8CVSS9.5AI score0.00656EPSS
SaveExploits0References2Affected Software1
20