CVE-2022-47583

Terminal character injection in Mintty before 3.6.3 allows code execution via unescaped output to the terminal.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-10-19

Last modified

2024-09-12

Weaknesses

CWE-74

Affected products

• Mintty (Mintty Project)

References

• https://dgl.cx/2023/09/ansi-terminal-security#mintty
• https://github.com/mintty/mintty/releases/tag/3.6.3