☆ Yσɠƚԋσʂ ☆ to

SecurityEnglish · 6 months ago

Recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution

2

6

Recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution

☆ Yσɠƚԋσʂ ☆ to

SecurityEnglish · 6 months ago

2

### Impact Repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be fooled into writing files not into the submodule's worktree but into a `.git/` director...

Chat

Em Adespoton@lemmy.ca
link
fedilink
arrow-up
3·
6 months ago
To clarify, this is a (patched) bug in Git, not in the OS/filesystem.