Vulnerabilities > CVE-2023-46322 - Unspecified vulnerability in Iterm2

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

iterm2

critical

NVD

Published: 2023-10-23

Updated: 2024-11-21

Summary

iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize ssh hostnames in URLs. The hostname's initial character may be non-alphanumeric. The hostname's other characters may be outside the set of alphanumeric characters, dash, and period.

Vulnerable Configurations

Part	Description	Count
Application	Iterm2 Iterm2 Iterm2 1.0.0 Iterm2 Iterm2 2.0 Iterm2 Iterm2 2.1.1 Iterm2 Iterm2 2.1.3 Iterm2 Iterm2 2.1.4 Iterm2 Iterm2 2.9.20151111 Iterm2 Iterm2 2.9.20151229 Iterm2 Iterm2 2.9.20160102 Iterm2 Iterm2 2.9.20160113 Iterm2 Iterm2 2.9.20160206 Iterm2 Iterm2 2.9.20160313 Iterm2 Iterm2 2.9.20160422 Iterm2 Iterm2 2.9.20160426 Iterm2 Iterm2 2.9.20160510 Iterm2 Iterm2 2.9.20160523 Iterm2 Iterm2 3.0.0 Iterm2 Iterm2 3.0.1 Iterm2 Iterm2 3.0.2 Iterm2 Iterm2 3.0.3 Iterm2 Iterm2 3.0.4 Iterm2 Iterm2 3.0.5 Iterm2 Iterm2 3.0.6 Iterm2 Iterm2 3.0.7 Iterm2 Iterm2 3.0.8 Iterm2 Iterm2 3.0.9 Iterm2 Iterm2 3.0.10 Iterm2 Iterm2 3.0.11 Iterm2 Iterm2 3.0.12 Iterm2 Iterm2 3.0.13 Iterm2 Iterm2 3.0.14 Iterm2 Iterm2 3.0.15 Iterm2 Iterm2 3.0.20160531 Iterm2 Iterm2 3.1.0 Iterm2 Iterm2 3.1.1 Iterm2 Iterm2 3.1.2 Iterm2 Iterm2 3.1.3 Iterm2 Iterm2 3.1.4 Iterm2 Iterm2 3.1.5 Iterm2 Iterm2 3.1.6 Iterm2 Iterm2 3.1.7 Iterm2 Iterm2 3.2.0 Iterm2 Iterm2 3.2.1 Iterm2 Iterm2 3.2.2 Iterm2 Iterm2 3.2.3 Iterm2 Iterm2 3.2.4 Iterm2 Iterm2 3.2.5 Iterm2 Iterm2 3.2.6 Iterm2 Iterm2 3.2.7 Iterm2 Iterm2 3.2.8 Iterm2 Iterm2 3.2.9 Iterm2 Iterm2 3.3.0 Iterm2 Iterm2 3.3.1 Iterm2 Iterm2 3.3.2 Iterm2 Iterm2 3.3.3 Iterm2 Iterm2 3.3.4 Iterm2 Iterm2 3.3.5 Iterm2 Iterm2 3.3.6 Iterm2 Iterm2 3.3.7 Iterm2 Iterm2 3.3.8 Iterm2 Iterm2 3.3.9 Iterm2 Iterm2 3.3.10 Iterm2 Iterm2 3.3.11 Iterm2 Iterm2 3.3.12 Iterm2 Iterm2 3.4.0 Iterm2 Iterm2 3.4.1 Iterm2 Iterm2 3.4.2 Iterm2 Iterm2 3.4.3 Iterm2 Iterm2 3.4.4 Iterm2 Iterm2 3.4.5 Iterm2 Iterm2 3.4.6 Iterm2 Iterm2 3.4.7 Iterm2 Iterm2 3.4.8 Iterm2 Iterm2 3.4.9 Iterm2 Iterm2 3.4.10 Iterm2 Iterm2 3.4.11 Iterm2 Iterm2 3.4.12 Iterm2 Iterm2 3.4.13 Iterm2 Iterm2 3.4.14 Iterm2 Iterm2 3.4.15 Iterm2 Iterm2 3.4.16 Iterm2 Iterm2 3.4.17 Iterm2 Iterm2 3.4.18 Iterm2 Iterm2 3.4.19 Iterm2 Iterm2 3.4.20 Iterm2 Iterm2 3.4.21 Iterm2 Iterm2 3.5.0	225

Summary

Vulnerable Configurations

References