CVE-2024-38395
In iTerm2 before 3.5.2, the "Terminal may report window title" setting is not honored, and thus remote code execution might occur but "is not trivially exploitable."
Published: 2024-06-16 · CVSS: 9.8 · CVSS 3.1
In iTerm2 before 3.5.2, the "Terminal may report window title" setting is not honored, and thus remote code execution might occur but "is not trivially exploitable."
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7