iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize ssh hostnames in URLs. The hostnames initial character may be non-alphanumeric. The hostnames other characters may be outside the set of alphanumeric characters, dash, and period.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Iterm2 | Iterm2 | * | 3.4.21 (including) |
| Iterm2 | Iterm2 | 3.5.0-beta1 (including) | 3.5.0-beta1 (including) |
| Iterm2 | Iterm2 | 3.5.0-beta10 (including) | 3.5.0-beta10 (including) |
| Iterm2 | Iterm2 | 3.5.0-beta2 (including) | 3.5.0-beta2 (including) |
| Iterm2 | Iterm2 | 3.5.0-beta3 (including) | 3.5.0-beta3 (including) |
| Iterm2 | Iterm2 | 3.5.0-beta4 (including) | 3.5.0-beta4 (including) |
| Iterm2 | Iterm2 | 3.5.0-beta5 (including) | 3.5.0-beta5 (including) |
| Iterm2 | Iterm2 | 3.5.0-beta6 (including) | 3.5.0-beta6 (including) |
| Iterm2 | Iterm2 | 3.5.0-beta7 (including) | 3.5.0-beta7 (including) |
| Iterm2 | Iterm2 | 3.5.0-beta8 (including) | 3.5.0-beta8 (including) |
| Iterm2 | Iterm2 | 3.5.0-beta9 (including) | 3.5.0-beta9 (including) |