writeups.xyz / Empowering weak primitives: file truncation to code execution with Git

Submitter : c2a

Date: 28 February 2023

Bounty : undisclosed

Vulnerabilities :

• Argument Injection
• RCE

Programs :

• Undisclosed

Authors :

• Thomas Chauchefoin (@Swapgs)

Link :
https://www.sonarsource.com/blog/empowering-weak-primitives-file-truncation-to-code-execution-with-git/