ID:10414 - Exploit for Input validation error in Git for Windows - CVE-2023-29007

Link to public exploit:

Vulnerability description

The vulnerability allows an attacker to tamper with Git configuration.

The vulnerability exists due to insufficient input validation in "git submodule deinit" when renaming or deleting a section from a configuration file. A remote attacker can trick the victim into running the command a malicious configuration file and tamper with Git configuration on the affected system.

Remediation