critical9.8
CVE-2023-46301
iTerm2 before 3.4.20 allow (potentially remote) code execution because of mishandling of certain escape sequences related to upload.
Impact
iTerm2 before 3.4.20 allow (potentially remote) code execution because of mishandling of certain escape sequences related to upload.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Iterm2 | Iterm2 | before 3.4.20 |
Weakness classification
References
- NVD record
- CVE.org record
- https://blog.solidsnail.com/posts/2023-08-28-iterm2-rce
- https://github.com/gnachman/iTerm2/commit/85cbf5ebda472c9ec295887e99c2b6f1b5867f1b
- https://github.com/gnachman/iTerm2/commit/b2268b03b5f3d4cd8ca275eaef5d16d0fac20009
- https://iterm2.com/news.html
- https://blog.solidsnail.com/posts/2023-08-28-iterm2-rce
- https://github.com/gnachman/iTerm2/commit/85cbf5ebda472c9ec295887e99c2b6f1b5867f1b
- https://github.com/gnachman/iTerm2/commit/b2268b03b5f3d4cd8ca275eaef5d16d0fac20009
- https://iterm2.com/news.html