git for windows project git for windows vulnerabilities and exploits

(subscribe to this query)

7.3

CVSSv3

Git for Windows is the Windows port of the revision control system Git. Prior to Git for Windows version 2.39.2, by carefully crafting DLL and putting into a subdirectory of a specific name living next to the Git for Windows installer, Windows can be tricked into side-loading sai...

Git For Windows Project Git For Windows

7.8

CVSSv3

Git for Windows is the Windows port of the revision control system Git. Prior to Git for Windows version 2.39.2, when `gitk` is run on Windows, it potentially runs executables from the current directory inadvertently, which can be exploited with some social engineering to trick u...

Git For Windows Project Git For Windows

7.8

CVSSv3

Untrusted search path vulnerability in Git 1.x for Windows allows local users to gain privileges via a Trojan horse git.exe file in the current working directory. NOTE: 2.x is unaffected.

Git For Windows Project Git For Windows

1 Github repository

7.8

CVSSv3

Git for Windows, the Windows port of Git, ships with an executable called `connect.exe`, which implements a SOCKS5 proxy that can be used to connect e.g. to SSH servers via proxies when certain ports are blocked for outgoing connections. The location of `connect.exe`'s confi...

Git For Windows Project Git For Windows

7.8

CVSSv3

Git for Windows is the Windows port of Git. Prior to version 2.40.1, any user of Git CMD who starts the command in an untrusted directory is impacted by an Uncontrolles Search Path Element vulnerability. Maliciously-placed `doskey.exe` would be executed silently upon running Git ...

Git For Windows Project Git For Windows

2.2

CVSSv3

In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer. As a consequence, Git is expected not to localize messages at all, and skips the gettext initialization. However, due to a change in MINGW-packages, the `gettext()` function's ...

Git For Windows Project Git For Windows Fedoraproject Fedora 37 Fedoraproject Fedora 38

7.8

CVSSv3

GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account.

Microsoft Visual Studio 2022 Microsoft Visual Studio 2017 Microsoft Visual Studio 2019 Git For Windows Project Git For Windows

7.8

CVSSv3

Git LFS is a command line extension for managing large files with Git. On Windows, if Git LFS operates on a malicious repository with a git.bat or git.exe file in the current directory, that program would be executed, permitting the malicious user to execute arbitrary code. This ...

Git Large File Storage Project Git Large File Storage

9.8

CVSSv3

Git LFS 2.12.0 allows Remote Code Execution.

Git Large File Storage Project Git Large File Storage 2.12.0

21 Github repositories

7.8

CVSSv3

On Windows, if Git LFS operates on a malicious repository with a `..exe` file as well as a file named `git.exe`, and `git.exe` is not found in `PATH`, the `..exe` program will be executed, permitting the malicious user to execute arbitrary code. This does not affect Unix systems....

Git Large File Storage Project Git Large File Storage

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook