What is GHSA-mc23-976p-j42x?

GHSA-mc23-976p-j42x is a security advisory published by GitHub Security Advisories with High severity. xterm vulnerable to remote code execution

Which CVE IDs does GHSA-mc23-976p-j42x cover?

GHSA-mc23-976p-j42x covers the following CVE IDs: CVE-2019-0542. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-mc23-976p-j42x?

GHSA-mc23-976p-j42x has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

Which products are affected by GHSA-mc23-976p-j42x?

GHSA-mc23-976p-j42x affects 3 products, including: npm/xterm:\u003c 3.8.1; npm/xterm:\u003e= 3.9.0, \u003c 3.9.2; npm/xterm:\u003e= 3.10.0, \u003c 3.10.1.

GHSA-mc23-976p-j42xHighCVSS 8.8

xterm vulnerable to remote code execution

Vendor

GitHub Security Advisories

Published

January 14, 2019

Last Modified

March 7, 2023

🔗 CVE IDs covered (1)

CVE-2019-0542 →

📋 Description

A remote code execution vulnerability exists in Xterm.js when the component mishandles special characters.

🎯 Affected products3

npm/xterm:< 3.8.1
npm/xterm:>= 3.9.0, < 3.9.2
npm/xterm:>= 3.10.0, < 3.10.1

🔗 References (9)

https://nvd.nist.gov/vuln/detail/CVE-2019-0542
https://github.com/advisories/GHSA-mc23-976p-j42x
https://access.redhat.com/errata/RHBA-2019:0959
https://access.redhat.com/errata/RHSA-2019:1422
https://access.redhat.com/errata/RHSA-2019:2551
https://access.redhat.com/errata/RHSA-2019:2552
http://www.securityfocus.com/bid/106434
https://github.com/xtermjs/xterm.js/commit/3592c641cd0348e0b698e8a180aea2072c6bcd9a
https://github.com/xtermjs/xterm.js/releases/tag/3.8.1