The vulnerability of the s:NetrwBookHistSave() function in the Vim text editor, which allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the s:NetrwBookHistSave function in the Vim text editor is related to improper elimination of separators. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name

...

Vim 注入漏洞

Vim is an open-source, cross-platform text editor developed by Vim developers. Versions of Vim prior to 9.2.0495 contained a vulnerability due to the netrw plugin. This vulnerability stemmed from the s:NetrwBookHistSave function in the netrw plugin, which inserted directory names derived from the...