« Volver al listado

CVE-2019-0542

Estado: ModificadaAlta (8.8)—

A remote code execution vulnerability exists in Xterm.js when the component mishandles special characters, aka "Xterm Remote Code Execution Vulnerability." This affects xterm.js.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Redhat — Openshift Container PlatformXtermjs — Xterm.js

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2019-0542",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "secure@microsoft.com",
      "affectedData": [
        {
          "vendor": "https://xtermjs.org/",
          "product": "xterm.js",
          "versions": [
            {
              "status": "affected",
              "version": "xterm.js"
            }
          ]
        }
      ]
    }
  ],
  "published": "2019-01-09T15:29:00.213",
  "references": [
    {
      "url": "http://www.securityfocus.com/bid/106434",
      "source": "secure@microsoft.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHBA-2019:0959",
      "source": "secure@microsoft.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2019:1422",
      "source": "secure@microsoft.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2019:2551",
      "source": "secure@microsoft.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2019:2552",
      "source": "secure@microsoft.com"
    },
    {
      "url": "https://github.com/xtermjs/xterm.js/releases",
      "source": "secure@microsoft.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/106434",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://access.redhat.com/errata/RHBA-2019:0959",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2019:1422",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2019:2551",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2019:2552",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/xtermjs/xterm.js/releases",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A remote code execution vulnerability exists in Xterm.js when the component mishandles special characters, aka \"Xterm Remote Code Execution Vulnerability.\" This affects xterm.js."
    },
    {
      "lang": "es",
      "value": "Existe una vulnerabilidad de ejecución remota de código en Xterm.js cuando el componente maneja mal los caracteres especiales, también conocida como \"Xterm Remote Code Execution Vulnerability\". Esto afecta a xterm.js"
    }
  ],
  "lastModified": "2026-06-17T02:08:19.950",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:xtermjs:xterm.js:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "174C752A-5862-4B2E-81BF-B33C939F6BA2",
              "versionEndExcluding": "5.0.0"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6F89A265-EBFC-4B1C-8106-B414F815F141",
              "versionEndExcluding": "3.9.99",
              "versionStartIncluding": "3.9"
            },
            {
              "criteria": "cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "25B054C0-BCF7-4B0A-9059-3DACA95DE9A1",
              "versionEndExcluding": "3.10.163",
              "versionStartIncluding": "3.10"
            },
            {
              "criteria": "cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8D88FD1A-0794-4E79-B51E-91F4403FD1F9",
              "versionEndExcluding": "3.11.104",
              "versionStartExcluding": "3.11"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secure@microsoft.com"
}