CVE-2023-46300

iTerm2 before 3.4.20 allow potentially remote code execution because of mishandling of certain escape sequences related to tmux integration...

CVE-2023-46301

iTerm2 before 3.4.20 allow potentially remote code execution because of mishandling of certain escape sequences related to upload...

CVE-2023-46301

iTerm2 before 3.4.20 allow potentially remote code execution because of mishandling of certain escape sequences related to upload...

Design/Logic Flaw

iTerm2 before 3.4.20 allow potentially remote code execution because of mishandling of certain escape sequences related to upload...

Design/Logic Flaw

iTerm2 before 3.4.20 allow potentially remote code execution because of mishandling of certain escape sequences related to tmux integration...

CVE-2023-46300

iTerm2 before 3.4.20 allow potentially remote code execution because of mishandling of certain escape sequences related to tmux integration...

iTerm2 Security Vulnerability

iTerm2 is a terminal emulation program written for Mac OS X. A security vulnerability exists in iTerm2 versions prior to 3.4.20 that stems from improper handling of certain escape sequences and allows remote code execution...

CVE-2023-46301

iTerm2 before 3.4.20 allow potentially remote code execution because of mishandling of certain escape sequences related to upload...

CVE-2023-46321

CVE-2023-46321 affects iTerm2, specifically the iTermSessionLauncher.m component, where paths in x-man-page URLs are not sanitized. This allows shell metacharacters to reach a /usr/bin/man command line, enabling a potentially dangerous injection path as described in multiple sources. The NVD entr...

CVE-2023-46322

iTerm2 (macOS) before 3.5.0beta12 contains an issue in the iTermSessionLauncher.m component where SSH hostnames in URLs are not sanitized. The hostname’s first character may be non‑alphanumeric and other characters may fall outside the allowed alphanumeric, dash, and period set, enabling potentia...

PT-2023-29958 · Iterm2 · Iterm2

Name of the Vulnerable Software and Affected Versions: iTerm2 versions prior to 3.5.0beta12 Description: The issue is related to the iTermSessionLauncher.m component in iTerm2, which does not properly sanitize paths in x-man-page URLs. This can lead to the inclusion of shell metacharacters in a...

CVE-2023-46300

iTerm2 before 3.4.20 allow potentially remote code execution because of mishandling of certain escape sequences related to tmux integration...

iTerm2 Security Vulnerability

iTerm2 is a terminal emulation program written for Mac OS X. A security vulnerability exists in iTerm2 versions prior to 3.5.0beta12 that stems from not cleaning up paths in the x-man-page URL...

CVE-2023-46322

iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize ssh hostnames in URLs. The hostname's initial character may be non-alphanumeric. The hostname's other characters may be outside the set of alphanumeric characters, dash, and period...

PT-2023-29959 · Iterm2 · Iterm2

Name of the Vulnerable Software and Affected Versions: iTerm2 versions prior to 3.5.0beta12 Description: The issue is related to the iTermSessionLauncher.m component in iTerm2, which does not properly sanitize ssh hostnames in URLs. This allows hostnames with non-alphanumeric initial characters a...

iTerm2 Security Vulnerability

iTerm2 is a terminal emulation program written for Mac OS X. A security vulnerability exists in iTerm2 versions prior to 3.4.20 that stems from improper handling of certain escape sequences and allows remote code execution...

CVE-2023-46321

iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize paths in x-man-page URLs. They may have shell metacharacters for a /usr/bin/man command line...

CVE-2023-46321

iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize paths in x-man-page URLs. They may have shell metacharacters for a /usr/bin/man command line...

CVE-2023-46301

iTerm2 before 3.4.20 allow potentially remote code execution because of mishandling of certain escape sequences related to upload...

CVE-2023-46300

CVE-2023-46300 affects iTerm2 on macOS, with remote code execution possible due to mishandling of certain escape sequences related to tmux integration in versions prior to 3.4.20. The Nessus and Red Hat/NVD records corroborate a RCE class flaw tied to escape sequence handling. Confirmed affected ...