Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2023-29007

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2023-29007.

Coverage Span: 2023-04-26
Reports: 1 related reports

Associated Reports & Timeline

Git Arbitrary Configuration Injection (CVE-2023-29007)

Git CVE-2023-29007 (CVSS 7.0): a logic error treats >1024-byte config values as new sections, letting overly long submodule URLs inject arbitrary config into .git/config, risking code execution.