Description

A remote code execution vulnerability exists in Xterm.js when the component mishandles special characters, aka "Xterm Remote Code Execution Vulnerability." This affects xterm.js.

Remediation

References

http://www.securityfocus.com/bid/106434

https://access.redhat.com/errata/RHBA-2019:0959

https://access.redhat.com/errata/RHSA-2019:1422

https://access.redhat.com/errata/RHSA-2019:2551

https://access.redhat.com/errata/RHSA-2019:2552

https://github.com/xtermjs/xterm.js/releases

Related Vulnerabilities

CVE-2019-10769 Vulnerability in maven package org.webjars.npm:safer-eval

CVE-2013-4330 Vulnerability in maven package org.apache.camel:camel-core

CVE-2019-10769 Vulnerability in npm package safer-eval

CVE-2018-5158 Vulnerability in npm package pdfjs-dist

CVE-2021-23337 Vulnerability in npm package lodash

Severity

Critical

Classification

CWE-94 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H