CVE-2025-22275
iTerm2 3.5.6 through 3.5.10 before 3.5.11 sometimes allows remote attackers to obtain sensitive information from terminal commands by reading the /tmp...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
iTerm2 3.5.6 through 3.5.10 before 3.5.11 sometimes allows remote attackers to obtain sensitive information from terminal commands by reading the /tmp/framer.txt file. This can occur for certain it2ssh and SSH Integration configurations, during remote logins to hosts that have a common Python installation.
Références
- advisory github.com
- advisory nvd.nist.gov
- web gitlab.com
- web iterm2.com
- web news.ycombinator.com