CVE:CVE-2023-29007
CNNVD:CNNVD-202304-2063
Git是一套免费、开源的分布式版本控制系统。
Git存在注入漏洞。攻击者利用该漏洞可以远程执行代码。
solution:Upgrade git-scm git to a higher version than 2.30.9,2.31.8,2.32.7,2.33.8,2.34.8,2.35.8,2.36.5,2.37.7,2.38.5,2.39.3,2.40.0,and avoid the version (,2.30.9),[2.31.0,2.31.8),[2.32.0,2.32.7),[2.33.0,2.33.8),[2.34.0,2.34.8),[2.35.0,2.35.8),[2.36.0,2.36.5),[2.37.0,2.37.7),[2.38.0,2.38.5),[2.39.0,2.39.3),2.40.0; Upgrade fedoraproject fedora to a higher version than 37,38,and avoid the version 37,38