CVE-2024-38395
In iTerm2 before 3.5.2, the "Terminal may report window title" setting is not honored, and thus remote code execution might occur but "is not triviall...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In iTerm2 before 3.5.2, the "Terminal may report window title" setting is not honored, and thus remote code execution might occur but "is not trivially exploitable."
Références
- advisory github.com
- advisory nvd.nist.gov
- patch gitlab.com
- web gitlab.com
- web iterm2.com
- web openwall.com
- web openwall.com