Git CMD erroneously executes `doskey.exe` in the current directory, if it exists
CVE-2023-29012

7.3HIGH

Key Information:

Vendor
Git-for-windows
Status
Git
Vendor
CVE Published:
25 April 2023

Summary

Git for Windows, the popular Windows port of the Git version control system, contains a vulnerability that arises when users run Git CMD from an untrusted directory prior to version 2.40.1. If a maliciously placed doskey.exe is present in that directory, it may execute without user knowledge, potentially compromising system security. Users are encouraged to upgrade to version 2.40.1, which addresses this issue. As a precautionary measure, it's advisable to refrain from using Git CMD in untrusted environments.

Affected Version(s)

git < 2.40.1

References

https://github.com/git-for-windows/git/security/advisorie...
x_refsource_CONFIRM
https://github.com/git-for-windows/git/releases/tag/v2.40...
x_refsource_MISC

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.