CVE-2023-22743

概要

参考情報

• attack.mitre.org/techniques/T1574/002 · Technical Description
• git-for-windows/git release v2.39.2.windows.1 · Release Notes
• git-for-windows/git security advisory · Vendor Advisory
• git-for-windows/git security advisory · Vendor Advisory
• learn.microsoft.com/en-us/windows/win32/controls/cookbook-overview · Patch
• learn.microsoft.com/en-us/windows/win32/sbscs/about-side-by-side-assemblies- · Patch

git for windows のその他の脆弱性

• CVE-2023-29012高 7.8Git for Windows is the Windows port of Git. Prior to version 2.40.1, any user of Git CMD who starts the command in an untrusted directory is…
• CVE-2023-29011高 7.8Git for Windows, the Windows port of Git, ships with an executable called `connect.exe`, which implements a SOCKS5 proxy that can be used to…
• CVE-2023-25815低 2.2In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer. As a consequence, Git is expected not to …
• CVE-2023-23618高 7.8Git for Windows is the Windows port of the revision control system Git. Prior to Git for Windows version 2.39.2, when `gitk` is run on Windo…
• CVE-2022-24767高 7.8GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account.