- Description
- Ghostty is a cross-platform terminal emulator. Ghostty, as allowed by default in 1.0.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands. This attack requires an attacker to send malicious escape sequences followed by convincing the user to physically press the "enter" key. Fixed in Ghostty v1.0.1.
- Source
- security-advisories@github.com
- NVD status
- Received
CVSS 4.0
- Type
- Secondary
- Base score
- 5.1
- Impact score
- -
- Exploitability score
- -
- Vector string
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Severity
- MEDIUM
- security-advisories@github.com
- CWE-94
- Hype score
- Not currently trending
🚨 CVE-2024-56803: Ghostty Vulnerability Allows Command Injection 🚨 WIRE TOR - The Ethical Hacking Services A critical vulnerability (CVE-2024-56803) has been identified in Ghostty, a cross-platform terminal emulator. This flaw enables attackers to manipulate. #hack https://t.
@WireTor
1 Jan 2025
55 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
New blog post: Ghostty 1.0.0 terminal security; https://t.co/6LV1TyshaV (CVE-2024-56803)
@davidgl
1 Jan 2025
58 Impressions
0 Retweets
0 Likes
1 Bookmark
0 Replies
0 Quotes
CVE-2024-56803 Ghostty is a cross-platform terminal emulator. Ghostty, as allowed by default in 1.0.0, allows attackers to modify the window title via a certain character escape seq… https://t.co/6PWsCtwBia
@CVEnew
31 Dec 2024
23194 Impressions
6 Retweets
55 Likes
8 Bookmarks
5 Replies
14 Quotes