writeups.xyz / Git honours embedded bare repos, and exploitation via core.fsmonitor in a directory's .git/config affects IDEs, shell prompts and Git pillagers

Submitter : c2a

Date: 16 March 2022

Bounty : undisclosed

Vulnerabilities :

• RCE

Programs :

• GitHub
• Microsoft
• JetBrains

Authors :

• Justin Steven (@Justinsteven)

Link :
https://github.com/justinsteven/advisories/blob/main/2022_git_buried_bare_repos_and_fsmonitor_various_abuses.md