Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob() function on Unix-like systems. By including a newline character (\n) in a pattern passed to glob(), an attacker may be able to execute arbitrary shell commands. This vulnerability depends on the user's 'shell' setting. This issue has been patched in version 9.2.0202.
| Version | Score | Severity | Vector String |
|---|---|---|---|
| 3.1 | 5.6 | Medium | CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N |