GitHub Advisoryadvisory · npm

GHSA-mc23-976p-j42x xterm vulnerable to remote code execution

HIGH Published 2019-01-14 Modified 2022-12-18 Official page ↗
Aliases
CVE-2019-0542
Ecosystem
npm
Packages
xterm
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-94
Reviewed
2020-06-16

Affected packages

• npm xterm: < 3.8.1 → fixed in 3.8.1 • npm xterm: >= 3.9.0, < 3.9.2 → fixed in 3.9.2 • npm xterm: >= 3.10.0, < 3.10.1 → fixed in 3.10.1

Description

A remote code execution vulnerability exists in Xterm.js when the component mishandles special characters.

Related

Alias · CVE (1)

  • CVE-2019-0542 A remote code execution vulnerability exists in Xterm.js when the component mishandles special characters, aka "Xterm Remote Code Execution… vulnerability

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References