writeups.xyz / Git Arbitrary Configuration Injection (CVE-2023-29007)

Submitter : c2a

Date: 26 April 2023

Bounty : undisclosed

Vulnerabilities :

• Logic Flaw
• Arbitrary Code Execution
• Security Code Review

Programs :

• Git

Authors :

• André Baptista (@0xacb)
• Vítor Pinho

Link :
https://blog.ethiack.com/en/blog/git-arbitrary-configuration-injection-cve-2023-29007