CVE-2023-46300

概要

参考情報

• blog.solidsnail.com/posts/2023-08-28-iterm2-rce · Exploit
• gnachman/iTerm2 commit ae81925 · Patch
• gnachman/iTerm2 commit b2268b0 · Patch
• iterm2.com/news.html · Release Notes

iterm2 のその他の脆弱性

• CVE-2026-41253高 7.8In iTerm2 through 3.6.9, displaying a .txt file can cause code execution via DCS 2000p and OSC 135 data, if the working directory contains a…
• CVE-2025-22275緊急 9.3iTerm2 3.5.6 through 3.5.10 before 3.5.11 sometimes allows remote attackers to obtain sensitive information from terminal commands by readin…
• CVE-2024-38396緊急 9.8An issue was discovered in iTerm2 3.5.x before 3.5.2. Unfiltered use of an escape sequence to report a window title, in combination with the…
• CVE-2024-38395緊急 9.8In iTerm2 before 3.5.2, the "Terminal may report window title" setting is not honored, and thus remote code execution might occur but "is no…
• CVE-2023-46322緊急 9.8iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize ssh hostnames in URLs. The hostname's initial character may be non-alp…