cve/2023/CVE-2023-23618.md

CVE-2023-23618

Description

Git for Windows is the Windows port of the revision control system Git. Prior to Git for Windows version 2.39.2, when gitk is run on Windows, it potentially runs executables from the current directory inadvertently, which can be exploited with some social engineering to trick users into running untrusted code. A patch is available in version 2.39.2. As a workaround, avoid using gitk (or Git GUI's "Visualize History" functionality) in clones of untrusted repositories.

POC

Reference

No PoCs from references.

Github

• https://github.com/9069332997/session-1-full-stack
• https://github.com/ARPSyndicate/cvemon
• https://github.com/KK-Designs/UpdateHub
• https://github.com/ycdxsb/ycdxsb