Description
Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim-s glob() function on Unix-like systems. By including a newline character (\n) in a pattern passed to glob(), an attacker may be able to execute arbitrary shell commands. This vulnerability depends on the user-s -shell- setting. This issue has been patched in version 9.2.0202.
CVSS 5.6EPSS 0.8340000000000001%Risque 0.6
Voir la source- Publication
- 2026-03-24 20:16:29
- Versions concernées
- < 9.2.0202
- Type
- Core software
- Vecteur
- CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N