Git Arbitrary Configuration Injection (CVE-2023-29007)

ethiack.com | vulnerability | CVE-2023-29007 | #rce | #git | #vulnerability | #research | #cve-2023-29007 | #config-injection

Summary

Git CVE-2023-29007 (CVSS 7.0): a logic error treats >1024-byte config values as new sections, letting overly long submodule URLs inject arbitrary config into .git/config, risking code execution.

Published: 2023-04-26 00:00
Collected: 2026-07-31 01:26

original ↗

Related coverage

back