CVE-2023-29012CWE-427

Git CMD erroneously executes `doskey.exe` in the current directory, if it exists

High · published April 25, 2023

CVSS v3.1
7.3
EPSS
0%
Percentile
30.7
In the wild
Unconfirmed
What it is

Git for Windows is the Windows port of Git. Prior to version 2.40.1, any user of Git CMD who starts the command in an untrusted directory is impacted by an Uncontrolles Search Path Element vulnerability. Maliciously-placed `doskey.exe` would be executed silently upon running Git CMD. The problem has been patched in Git for Windows v2.40.1. As a workaround, avoid using Git CMD or, if using Git CMD, avoid starting it in an untrusted directory.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00380 · 30.7th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2023-04-25T20:44Z
EPSS history
Timeline
  • 25 APR 20:44Z
    Git CMD erroneously executes `doskey.exe` in the current directory, if it exists
    cvelistv5