132 matches found
CVE-2023-46322
iTerm2 (macOS) before 3.5.0beta12 contains an issue in the iTermSessionLauncher.m component where SSH hostnames in URLs are not sanitized. The hostname’s first character may be non‑alphanumeric and other characters may fall outside the allowed alphanumeric, dash, and period set, enabling potentia...
CVE-2023-46321
iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize paths in x-man-page URLs. They may have shell metacharacters for a /usr/bin/man command line...
CVE-2023-46321
iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize paths in x-man-page URLs. They may have shell metacharacters for a /usr/bin/man command line...
PT-2023-29958 · Iterm2 · Iterm2
Name of the Vulnerable Software and Affected Versions: iTerm2 versions prior to 3.5.0beta12 Description: The issue is related to the iTermSessionLauncher.m component in iTerm2, which does not properly sanitize paths in x-man-page URLs. This can lead to the inclusion of shell metacharacters in a...
CVE-2023-46322
iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize ssh hostnames in URLs. The hostname's initial character may be non-alphanumeric. The hostname's other characters may be outside the set of alphanumeric characters, dash, and period...
iTerm2 Security Vulnerability
iTerm2 is a terminal emulation program written for Mac OS X. A security vulnerability exists in iTerm2 versions prior to 3.4.20 that stems from improper handling of certain escape sequences and allows remote code execution...
CVE-2023-46321
iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize paths in x-man-page URLs. They may have shell metacharacters for a /usr/bin/man command line...
iTerm2 Security Vulnerability
iTerm2 is a terminal emulation program written for Mac OS X. A security vulnerability exists in iTerm2 versions prior to 3.5.0beta12 that stems from not cleaning up ssh hostnames in URLs...
CVE-2023-46301: Improper Encoding or Escaping of Output
iTerm2 before 3.4.20 allow potentially remote code execution because of mishandling of certain escape sequences related to upload...
iTerm2 Security Vulnerability
iTerm2 is a terminal emulation program written for Mac OS X. A security vulnerability exists in iTerm2 versions prior to 3.5.0beta12 that stems from not cleaning up paths in the x-man-page URL...
CVE-2023-46300: Improper Encoding or Escaping of Output
iTerm2 before 3.4.20 allow potentially remote code execution because of mishandling of certain escape sequences related to tmux integration...
CVE-2023-46301
iTerm2 before 3.4.20 allow potentially remote code execution because of mishandling of certain escape sequences related to upload...
PT-2023-29959 · Iterm2 · Iterm2
Name of the Vulnerable Software and Affected Versions: iTerm2 versions prior to 3.5.0beta12 Description: The issue is related to the iTermSessionLauncher.m component in iTerm2, which does not properly sanitize ssh hostnames in URLs. This allows hostnames with non-alphanumeric initial characters a...
CVE-2023-46300
iTerm2 before 3.4.20 allow potentially remote code execution because of mishandling of certain escape sequences related to tmux integration...
iTerm2 Security Vulnerability
iTerm2 is a terminal emulation program written for Mac OS X. A security vulnerability exists in iTerm2 versions prior to 3.4.20 that stems from improper handling of certain escape sequences and allows remote code execution...
CVE-2022-45872
iTerm2 before 3.4.18 mishandles a DECRQSS response...
CVE-2022-45872
iTerm2 before 3.4.18 mishandles a DECRQSS response...
PT-2022-27662 · Iterm2 · Iterm2
Name of the Vulnerable Software and Affected Versions: iTerm2 versions prior to 3.4.18 Description: The issue is related to the mishandling of a DECRQSS response. Recommendations: For versions prior to 3.4.18, update to version 3.4.18 or later to resolve the issue...
CVE-2022-45872
CVE-2022-45872 affects iTerm2 prior to 3.4.18, where a DECRQSS response is mishandled. The issue concerns iTerm2 (macOS) with the vulnerability stemming from the mishandling in the DECRQSS parsing, and is described with CVSS v3.1 base metrics of 9.8 (CRITICAL) impacting confidentiality, integrity...