---
id: 5655
title: "Git Arbitrary Configuration Injection (CVE-2023-29007)"
cve: CVE-2023-29007
source_domain: ethiack.com
source_url: "https://ethiack.com/info-hub/research/git-arbitrary-configuration-injection-cve-2023-29007"
published_at: "2023-04-26T00:00:00Z"
tags: ["rce", "git", "vulnerability", "research", "cve-2023-29007", "config-injection"]
phying_url: "https://phying.com/item/5655"
lang: en
---

# Git Arbitrary Configuration Injection (CVE-2023-29007)

## Summary

Git CVE-2023-29007 (CVSS 7.0): a logic error treats >1024-byte config values as new sections, letting overly long submodule URLs inject arbitrary config into .git/config, risking code execution.

## Intelligence Metadata

- **Sources:** ethiack.com
- **CVE:** CVE-2023-29007
- **Published:** 2023-04-26T00:00:00Z
- **Original:** https://ethiack.com/info-hub/research/git-arbitrary-configuration-injection-cve-2023-29007
- **Phying News:** https://phying.com/item/5655