by Kastro
Paper/Archive/CVE-2023-39150

CVE-2023-39150

mitre — ConEmu before commit 230724 does not sanitize title responses correctly for control characters, potentially leading to arbitrary code exe…

EPSS 0.9%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 59.3.593 × 2011.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

ConEmu before commit 230724 does not sanitize title responses correctly for control characters, potentially leading to arbitrary code execution. This is related to an incomplete fix for CVE-2022-46387.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refgithub.com/Maximus5/ConEmu/commit/60683a186628ffaa7689fcb64b3c38ced69287c1refgist.github.com/dgl/081cf503dc635df39d844e058a6d4c88