cve/2019/CVE-2019-19604.md

CVE-2019-19604

Description

Arbitrary command execution is possible in Git before 2.20.2, 2.21.x before 2.21.1, 2.22.x before 2.22.2, 2.23.x before 2.23.1, and 2.24.x before 2.24.1 because a "git submodule update" operation can run commands found in the .gitmodules file of a malicious repository.

POC

Reference

No PoCs from references.

Github

• https://github.com/9069332997/session-1-full-stack
• https://github.com/meherarfaoui09/meher
• https://github.com/neargle/my-re0-k8s-security
• https://github.com/orgTestCodacy11KRepos110MB/repo-3574-my-re0-k8s-security