PT-2022-12566 · Git · Git For Windows

Published 2022-01-31 · Updated 2022-02-04 · CVE-2021-46101

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Git for windows versions through 2.34.1

Description The issue allows git.cmd to be run directly when using git pull to update the local warehouse.

Recommendations For Git for windows versions through 2.34.1, update to a version later than 2.34.1 to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2021-46101

Affected Products

Git For Windows

References · 8

• 🔥❌ https://github.com/0xADY/git_rce · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2021-46101 · Security Note
• https://osv.dev/vulnerability/ALPINE-CVE-2021-46101 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-46101 · Vendor Advisory
• https://t.me/cvenotify/26059 · Telegram Post
• https://t.me/cvenotify/26046 · Telegram Post
• https://t.me/cibsecurity/36580 · Telegram Post
• https://security.alpinelinux.org/vuln/CVE-2021-46101 · Note