KLA20236
Multiple vulnerabilities in Git for Windows

Multiple vulnerabilities were found in Git for Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. Remote code execution vulnerability in Git can be exploited remotely to execute arbitrary code.
2. Information disclosure vulnerability in Git can be exploited to obtain sensitive information.

The following public exploits exists for this vulnerability:

https://github.com/smash8tap/CVE-2023-22490_PoC

Git for Windows earlier than 2.39.2

Update to the latest version
Git — Downloading Package