← Back

CVE-2022-46387

nvd nist
Published: Mar 28, 2023Modified: Feb 19, 2025

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

ConEmu through 220807 and Cmder before 1.3.21 report the title of the terminal, including control characters, which allows an attacker to change the title and then execute it as commands.

Affected (2)

Products: Cmder: Cmder · Maximus5: Conemu
Cmder
1 product
Cmder
Maximus5
1 product
Conemu
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Cmder
Before 1.3.2
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Conemu
Up to 22.08.07

Related CWEs

CWE-116
Improper Encoding or Escaping of Output
The product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.

References (4)

Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Release Notes
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release Notes

Timeline

No history available yet.