CVE-2023-25652

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-25652
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-25652.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-25652
Aliases
  • GHSA-2hvf-7c8p-28fx
Downstream
Related
Published
2023-04-25T19:17:35.315Z
Modified
2026-02-07T05:25:51.678097Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
"git apply --reject" partially-controlled arbitrary file write
Details

Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, by feeding specially crafted input to git apply --reject, a path outside the working tree can be overwritten with partially controlled contents (corresponding to the rejected hunk(s) from the given patch). A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid using git apply with --reject when applying patches from an untrusted source. Use git apply --stat to inspect a patch before applying; avoid applying one that create a conflict where a link corresponding to the *.rej file exists.

Database specific 
{
    "cwe_ids": [
        "CWE-22"
    ],
    "cna_assigner": "GitHub_M",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25652.json"
}
References

Affected packages

Git / github.com/git-for-windows/git

Affected ranges

Type
GIT
Repo
https://github.com/git-for-windows/git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
469fcac0990381aa6d656f5b02924482b91e0ce5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-25652.json"

Git / github.com/git/git

Affected ranges

Type
GIT
Repo
https://github.com/git/git
Events
Introduced
225bc32a989d7a22fa6addafd4ce7dcd04675dbf
Fixed
3a19048ce498d519bd564c9fd222161dca789321
Fixed
668f2d53613ac8fd373926ebe219f2c29112d93e
Introduced
89bece5c8c96f0b962cfc89e63f82d603fd60bed
Fixed
7380a72f6b4da51f6db975f4a37c4ea9dadbf477
Introduced
c48035d29b4e524aed3a32f0403676f0d9128863
Fixed
9bbde12feed306b9044060e4eab6b3b4c6628050
Introduced
cd3e606211bb1cf8bc57f7d76bab98cc17a150bc
Fixed
abcb63fb70a69956a892fa830f3866098797787c
Introduced
ebf3c04b262aa27fbb97f8a0156c2347fecafafb
Fixed
b8787a98dbef7b3b1cec9818b8856de557a65256
Introduced
e4a4b31577c7419497ac30cebe30d755b97752c5
Fixed
d27ae36bbb7512474f759ac61a0581b6bbb36b2f
Introduced
a5828ae6b52137b913b978e16cd2334482eb4c1f
Fixed
ea56f91275c1797776f10f4ac5d65671bb4f3e8b
Introduced
3dcec76d9df911ed8321007b1d197c1a206dc164
Fixed
ec583449067bab5b800ecc63926f35c9dae96fa1
Introduced
6cd33dceed60949e2dbc32e3f0f5e67c4c882e1e
Fixed
ecaa3db17183b4a3895ccd0c0c1af01d0e6fed45

Affected versions

v2.*
v2.30.3
v2.30.4
v2.30.5
v2.30.6
v2.30.7
v2.30.8
v2.30.9
v2.31.2
v2.31.3
v2.31.4
v2.31.5
v2.31.6
v2.31.7
v2.31.8
v2.32.1
v2.32.2
v2.32.3
v2.32.4
v2.32.5
v2.32.6
v2.32.7
v2.33.0
v2.33.1
v2.33.2
v2.33.3
v2.33.4
v2.33.5
v2.33.6
v2.33.7

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-25652.json"