CVE-2023-39150

ConEmu is affected prior to commit 230724, where title-response sanitization fails for control characters, enabling potential arbitrary code execution. This is tied to an incomplete fix for CVE-2022-46387. Affected component: ConEmu’s title handling path; root cause is improper sanitization of te...

CVE-2022-46387

CVE-2022-46387 affects ConEmu up to 220807 and Cmder up to 1.3.21, where terminal title strings can include control characters that are then executed as commands. The root cause is lack of sanitization of title responses containing control characters, enabling arbitrary command execution. Impact ...