CVE-2019-20807

—

CVSS 3.1

5.3 medium

EPSS

<1%p40

Published

May 28, 2020 (May 28, 2020)

Modified

Jun 17, 2026

Description

In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua).

Vendors: vim debian opensuse canonical apple starwindsoftware
Products: vim, debian linux, leap, ubuntu linux, mac os x, command center, san \& nas
Weakness: CWE-78
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.