CVE-2023-47104

tinyfiledialogs aka tiny file dialogs before 3.15.0 allows shell metacharacters such as a backquote or a dollar sign in titles, messages, and other input data. NOTE: this issue exists because of an incomplete fix for CVE-2020-36767, which only considered single and double quote characters...

CVE-2023-47104

tinyfiledialogs aka tiny file dialogs before 3.15.0 allows shell metacharacters such as a backquote or a dollar sign in titles, messages, and other input data. NOTE: this issue exists because of an incomplete fix for CVE-2020-36767, which only considered single and double quote characters...

CVE-2023-47104

tinyfiledialogs aka tiny file dialogs before 3.15.0 allows shell metacharacters such as a backquote or a dollar sign in titles, messages, and other input data. NOTE: this issue exists because of an incomplete fix for CVE-2020-36767, which only considered single and double quote characters...

CVE-2020-36767

tinyfiledialogs aka tiny file dialogs before 3.8.0 allows shell metacharacters in titles, messages, and other input data...

Input validation

tinyfiledialogs aka tiny file dialogs before 3.8.0 allows shell metacharacters in titles, messages, and other input data...

Design/Logic Flaw

tinyfiledialogs aka tiny file dialogs before 3.15.0 allows shell metacharacters such as a backquote or a dollar sign in titles, messages, and other input data. NOTE: this issue exists because of an incomplete fix for CVE-2020-36767, which only considered single and double quote characters...

PT-2023-11904 · Unknown · Tinyfiledialogs

Name of the Vulnerable Software and Affected Versions: tinyfiledialogs versions prior to 3.8.0 Description: The issue allows shell metacharacters in titles, messages, and other input data. Recommendations: For versions prior to 3.8.0, update to version 3.8.0 or later to resolve the issue...

CVE-2023-47104

tinyfiledialogs aka tiny file dialogs before 3.15.0 allows shell metacharacters such as a backquote or a dollar sign in titles, messages, and other input data. NOTE: this issue exists because of an incomplete fix for CVE-2020-36767, which only considered single and double quote characters...

CVE-2020-36767

tinyfiledialogs aka tiny file dialogs before 3.8.0 allows shell metacharacters in titles, messages, and other input data...

CVE-2020-36767

The CVE-2020-36767 entry concerns tinyfiledialogs (tiny file dialogs). The connected sources confirm that versions before 3.8.0 were vulnerable to shell metacharacters in input fields such as titles and messages, due to an incomplete fix. Affected software is the tinyfiledialogs library (C/C++ he...

PT-2023-30311 · Unknown · Tinyfiledialogs

Name of the Vulnerable Software and Affected Versions: tinyfiledialogs versions prior to 3.15.0 Description: The issue allows shell metacharacters, such as a backquote or a dollar sign, in titles, messages, and other input data. This problem exists due to an incomplete fix for a previous issue,...

tinyfiledialogs-rs Security Vulnerabilities

tinyfiledialogs-rs is a tinyfiledialog library highly bound to Rust. A security vulnerability exists in tinyfiledialogs-rs prior to version 3.8.0 that stems from allowing shell metacharacters to be used in headers, messages, and other input data, leading to code execution...

CVE-2020-36767

tinyfiledialogs aka tiny file dialogs before 3.8.0 allows shell metacharacters in titles, messages, and other input data...

tinyfiledialogs-rs Security Vulnerabilities

tinyfiledialogs-rs is a tinyfiledialog library highly bound to Rust. A security vulnerability in tinyfiledialogs-rs prior to version 3.8.0, which stems from an incomplete fix in CVE-2020-36767, allows the use of shell metacharacters in headers, messages, and other input data, leading to code...

CVE-2023-47104

tinyfiledialogs aka tiny file dialogs before 3.15.0 allows shell metacharacters such as a backquote or a dollar sign in titles, messages, and other input data. NOTE: this issue exists because of an incomplete fix for CVE-2020-36767, which only considered single and double quote characters...

CVE-2023-47104

CVE-2023-47104 affects the tinyfiledialogs library (tiny file dialogs). It allows shell metacharacters (e.g., backquote, dollar sign) in user-visible input like titles and messages due to an incomplete fix of CVE-2020-36767. Affected versions are before 3.15.0. The issue's root cause is improper ...

CVE-2023-46321

iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize paths in x-man-page URLs. They may have shell metacharacters for a /usr/bin/man command line...

CVE-2023-46321

iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize paths in x-man-page URLs. They may have shell metacharacters for a /usr/bin/man command line...

PT-2023-29958 · Iterm2 · Iterm2

Name of the Vulnerable Software and Affected Versions: iTerm2 versions prior to 3.5.0beta12 Description: The issue is related to the iTermSessionLauncher.m component in iTerm2, which does not properly sanitize paths in x-man-page URLs. This can lead to the inclusion of shell metacharacters in a...

CVE-2023-46321

CVE-2023-46321 affects iTerm2, specifically the iTermSessionLauncher.m component, where paths in x-man-page URLs are not sanitized. This allows shell metacharacters to reach a /usr/bin/man command line, enabling a potentially dangerous injection path as described in multiple sources. The NVD entr...