CVE-2023-29012

Name of the Vulnerable Software and Affected Versions Git for Windows versions prior to 2.40.1

Description The issue is related to an Uncontrolled Search Path Element vulnerability. It affects users of Git CMD who start the command in an untrusted directory, allowing maliciously-placed doskey.exe to be executed silently. This could potentially enable an attacker to execute arbitrary code.

Recommendations For versions prior to 2.40.1, update to Git for Windows version 2.40.1 to resolve the issue. As a temporary workaround, avoid using Git CMD or, if using Git CMD, avoid starting it in an untrusted directory.