Skip to content
OpenAdvisories
High WID-SEC-2023-0394 2 CVEs

git for Windows: Mehrere Schwachstellen

Published Feb 14, 2023 · Updated Feb 14, 2023 · de-DE

Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in git for Windows ausnutzen, um seine Privilegien zu erhöhen und beliebigen Code auszuführen.

Product

Git ist eine freie Software zur verteilten Versionsverwaltung von Dateien.

Vulnerabilities 2

  • High 8.6
    CVE-2023-23618

    gitk can inadvertently call executables in the worktree

    Git for Windows is the Windows port of the revision control system Git. Prior to Git for Windows version 2.39.2, when `gitk` is run on Windows, it potentially runs executables from the current directory inadvertently, which can be exploited with some social e…

    git-for-windows git
  • High 7.3
    CVE-2023-22743

    Git for Windows' installer is susceptible to DLL side loading attacks

    Git for Windows is the Windows port of the revision control system Git. Prior to Git for Windows version 2.39.2, by carefully crafting DLL and putting into a subdirectory of a specific name living next to the Git for Windows installer, Windows can be tricked …

    git-for-windows git

Revision history

  1. #1

    Initiale Fassung

References