cve/2019/CVE-2019-19604.md

### [CVE-2019-19604](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19604)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

Arbitrary command execution is possible in Git before 2.20.2, 2.21.x before 2.21.1, 2.22.x before 2.22.2, 2.23.x before 2.23.1, and 2.24.x before 2.24.1 because a "git submodule update" operation can run commands found in the .gitmodules file of a malicious repository.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/9069332997/session-1-full-stack
- https://github.com/meherarfaoui09/meher
- https://github.com/neargle/my-re0-k8s-security
- https://github.com/orgTestCodacy11KRepos110MB/repo-3574-my-re0-k8s-security