high8.8
CVE-2019-0542
A remote code execution vulnerability exists in Xterm.js when the component mishandles special characters, aka "Xterm Remote Code Execution Vulnerability." Thi…
Impact
A remote code execution vulnerability exists in Xterm.js when the component mishandles special characters, aka "Xterm Remote Code Execution Vulnerability." This affects xterm.js.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xtermjs | Xterm.Js | before 5.0.0 |
| Redhat | Openshift Container Platform | from 3.9 before 3.9.99 from 3.10 before 3.10.163 after 3.11 before 3.11.104 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/106434
- https://access.redhat.com/errata/RHBA-2019:0959
- https://access.redhat.com/errata/RHSA-2019:1422
- https://access.redhat.com/errata/RHSA-2019:2551
- https://access.redhat.com/errata/RHSA-2019:2552
- https://github.com/xtermjs/xterm.js/releases
- http://www.securityfocus.com/bid/106434
- https://access.redhat.com/errata/RHBA-2019:0959
- https://access.redhat.com/errata/RHSA-2019:1422
- https://access.redhat.com/errata/RHSA-2019:2551
- https://access.redhat.com/errata/RHSA-2019:2552
- https://github.com/xtermjs/xterm.js/releases