high7.8
CVE-2021-28832
VSCodeVim before 1.19.0 allows attackers to execute arbitrary code via a crafted workspace configuration.
Impact
VSCodeVim before 1.19.0 allows attackers to execute arbitrary code via a crafted workspace configuration.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vim Project | Vim | before 1.19.0 |
References
- NVD record
- CVE.org record
- https://github.com/VSCodeVim/Vim/commit/939df0e7fd55a9840dbd4fb3c907315e2a5ef446
- https://marketplace.visualstudio.com/items?itemName=vscodevim.vim
- https://vuln.ryotak.me/advisories/9
- https://github.com/VSCodeVim/Vim/commit/939df0e7fd55a9840dbd4fb3c907315e2a5ef446
- https://marketplace.visualstudio.com/items?itemName=vscodevim.vim
- https://vuln.ryotak.me/advisories/9