PT-2023-36339 · Rvim · Rvim

Published 2023-04-11 · Updated 2023-04-11

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions rvim (affected versions not specified)

Description The issue allows rvim to execute a shell through the :diffpatch command.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2023-0137

Affected Products

Rvim

References · 4

• https://osv.dev/vulnerability/MGASA-2023-0137 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2023-0137.html · Security Note
• https://github.com/vim/vim/commit/23a971da506249fc8388f06cd5c011b83406ac5c · Note
• https://bugs.mageia.org/show_bug.cgi?id=31766 · Note