Description
A remote code execution vulnerability exists in Xterm.js when the component mishandles special characters, aka "Xterm Remote Code Execution Vulnerability." This affects xterm.js.
Remediation
References
http://www.securityfocus.com/bid/106434
https://access.redhat.com/errata/RHBA-2019:0959
https://access.redhat.com/errata/RHSA-2019:1422
https://access.redhat.com/errata/RHSA-2019:2551
https://access.redhat.com/errata/RHSA-2019:2552
https://github.com/xtermjs/xterm.js/releases
Related Vulnerabilities
CVE-2012-0394 Vulnerability in maven package org.apache.struts:struts2-core
CVE-2013-2035 Vulnerability in maven package org.fusesource.hawtjni:hawtjni-runtime
CVE-2020-5258 Vulnerability in maven package org.webjars.bowergithub.dojo:dojo
CVE-2019-10173 Vulnerability in maven package com.thoughtworks.xstream:xstream
CVE-2023-36542 Vulnerability in maven package org.apache.nifi:nifi-record-serialization-services