{"vulnerability": "CVE-2023-29007", "sightings": [{"uuid": "ae80ac02-7162-4f8c-881f-fb912ada118e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-08", "content": "", "creation_timestamp": "2025-04-15T10:00:00.000000Z"}, {"uuid": "fc93361f-9be1-476a-b2e5-956227e348a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4251", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aPoC repository for CVE-2023-29007\nURL\uff1ahttps://github.com/ethiack/CVE-2023-29007\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-04-26T14:35:07.000000Z"}, {"uuid": "d03909d1-9900-4e69-8ad0-ed3ce44e23c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "published-proof-of-concept", "source": "https://t.me/arvinclub1/99", "content": "CVE-2023-29007", "creation_timestamp": "2023-04-27T07:07:37.000000Z"}, {"uuid": "1a783baa-0ab6-4484-aeb5-ac73a804d6e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "published-proof-of-concept", "source": "https://t.me/arvinclub1/98", "content": "https://blog.ethiack.com/en/blog/git-arbitrary-configuration-injection-cve-2023-29007", "creation_timestamp": "2023-04-27T07:06:35.000000Z"}, {"uuid": "5512a7ea-387c-4a4d-a054-61d35a821893", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "published-proof-of-concept", "source": "Telegram/r1PFadb90p6lTxGnl_f2N-hr-frtiZS7amPP7ck3RpMYFQ", "content": "", "creation_timestamp": "2023-04-27T09:53:54.000000Z"}, {"uuid": "280e94f1-5508-4b22-a256-03ab899555d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/1468", "content": "CVE-2023-29007\nGit Arbitrary Configuration Injection\n*\nreadme\n*\nPOC exploit\n\n#git #exploit", "creation_timestamp": "2023-04-27T07:07:43.000000Z"}, {"uuid": "66a37ae7-83cb-498e-9ddc-3421ceb74582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "published-proof-of-concept", "source": "Telegram/fV81_v8x36zAgCL91UuHBTq-t7A1rFWRsLJmOGWfzfBQXhM", "content": "", "creation_timestamp": "2023-05-23T08:55:19.000000Z"}, {"uuid": "8af5d0a7-b3ea-4ed0-bb4f-09a28e235637", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/3331", "content": "CVE-2023-29007 |\u00a0Git Arbitrary Configuration Injection\n\nDownload: https://system32.ink/news-feed/p/314/", "creation_timestamp": "2023-04-27T09:52:54.000000Z"}, {"uuid": "e6376dba-ac2d-4928-a1fa-e8b0b44bcde3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "seen", "source": "https://t.me/cibsecurity/62860", "content": "\u203c CVE-2023-29007 \u203c\n\nGit is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially crafted `.gitmodules` file with submodule URLs that are longer than 1024 characters can used to exploit a bug in `config.c::git_config_copy_or_rename_section_in_file()`. This bug can be used to inject arbitrary configuration into a user's `$GIT_DIR/config` when attempting to remove the configuration section associated with that submodule. When the attacker injects configuration values which specify executables to run (such as `core.pager`, `core.editor`, `core.sshCommand`, etc.) this can lead to a remote code execution. A fix A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid running `git submodule deinit` on untrusted repositories or without prior inspection of any submodule sections in `$GIT_DIR/config`.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-26T00:25:22.000000Z"}, {"uuid": "ff2a8283-aef9-4eb6-a4e2-57b3cf0eda4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3338", "content": "Git Arbitrary Configuration Injection (CVE-2023-29007) https://blog.ethiack.com/en/blog/git-arbitrary-configuration-injection-cve-2023-29007", "creation_timestamp": "2026-08-03T01:29:05.169312Z"}, {"uuid": "8f9f612a-0981-42b6-a430-646508572e31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/12351", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-29007_win-version*\nGithub: https://github.com/x-Defender/CVE-2023-29007_win-version", "creation_timestamp": "2026-07-31T00:00:05.584857Z"}, {"uuid": "45dc4f56-9b0a-406c-8f20-593657f747a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/12201", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *git_for_windows-CVE-2023-29007*\nGithub: https://github.com/x-Defender/git_for_windows-CVE-2023-29007", "creation_timestamp": "2026-07-31T01:00:04.229913Z"}, {"uuid": "24c0b501-5260-4904-bedc-c932efcb977a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/12084", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-29007*\nGithub: https://github.com/omespino/CVE-2023-29007", "creation_timestamp": "2026-07-31T01:00:04.004458Z"}, {"uuid": "ef649420-8966-4a15-ba65-251192e0d35d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/12349", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-29007_win-git*\nGithub: https://github.com/x-Defender/CVE-2023-29007_win-git", "creation_timestamp": "2026-07-31T01:00:04.617117Z"}, {"uuid": "db1d28fa-d1bf-4cc5-8337-000a85f09c54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11628", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-29007*\nGithub: https://github.com/ethiack/CVE-2023-29007", "creation_timestamp": "2026-07-31T03:00:04.149926Z"}, {"uuid": "cfcf585e-738a-4f89-8f74-9d443c5b2a3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8390", "content": "#exploit\n1. CVE-2023-29007:\nGit Arbitrary Configuration Injection\nhttps://blog.ethiack.com/en/blog/git-arbitrary-configuration-injection-cve-2023-29007\n\n2. CVE-2020-0796:\nWindows Protocol TestSuites is to trigger BSoD\nhttps://github.com/Ajomix/CVE-2020-0796", "creation_timestamp": "2024-03-19T03:31:34.000000Z"}, {"uuid": "b40cc8a7-9f9b-4e8f-9f91-8917aa2b10f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11628", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-29007*\nGithub: https://github.com/ethiack/CVE-2023-29007", "creation_timestamp": "2026-08-01T00:00:43.770458Z"}, {"uuid": "cadc598e-2d66-4788-ad9e-0f78e4dba6d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/12084", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-29007*\nGithub: https://github.com/omespino/CVE-2023-29007", "creation_timestamp": "2026-08-01T00:00:45.634773Z"}, {"uuid": "ca646666-69d6-4eb3-b540-8cca2fbf2410", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/12201", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *git_for_windows-CVE-2023-29007*\nGithub: https://github.com/x-Defender/git_for_windows-CVE-2023-29007", "creation_timestamp": "2026-08-01T00:00:45.829422Z"}, {"uuid": "4da78387-6d21-449e-b354-a0c96c83c030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/12349", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-29007_win-git*\nGithub: https://github.com/x-Defender/CVE-2023-29007_win-git", "creation_timestamp": "2026-08-01T00:00:46.246650Z"}, {"uuid": "211efd43-d029-4f16-ba00-4fd350b14842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3338", "content": "Git Arbitrary Configuration Injection (CVE-2023-29007) https://blog.ethiack.com/en/blog/git-arbitrary-configuration-injection-cve-2023-29007", "creation_timestamp": "2026-08-02T18:00:04.962773Z"}, {"uuid": "f1bf1b2c-054c-4d24-a779-1211820ed628", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "seen", "source": "https://t.me/CVEhub/12084", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-29007*\nGithub: https://github.com/omespino/CVE-2023-29007", "creation_timestamp": "2026-07-29T12:00:34.207579Z"}, {"uuid": "12c20d49-00d3-4e77-9259-a3bb24df4b00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "seen", "source": "https://t.me/CVEhub/11628", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-29007*\nGithub: https://github.com/ethiack/CVE-2023-29007", "creation_timestamp": "2026-07-29T12:00:35.542230Z"}, {"uuid": "4a5066f9-229b-4b3c-8387-0355919eee62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "seen", "source": "https://t.me/CVEhub/12349", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-29007_win-git*\nGithub: https://github.com/x-Defender/CVE-2023-29007_win-git", "creation_timestamp": "2026-07-29T12:00:33.790701Z"}, {"uuid": "c25c6e53-89fb-4f2f-93a3-5dc76aa6d71e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "seen", "source": "https://t.me/CVEhub/12201", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *git_for_windows-CVE-2023-29007*\nGithub: https://github.com/x-Defender/git_for_windows-CVE-2023-29007", "creation_timestamp": "2026-07-29T12:00:34.061440Z"}, {"uuid": "5a66a4e2-f855-4bf5-b9f1-5b490c3d81a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "seen", "source": "https://t.me/CVEhub/12351", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-29007_win-version*\nGithub: https://github.com/x-Defender/CVE-2023-29007_win-version", "creation_timestamp": "2026-07-29T12:00:33.632324Z"}, {"uuid": "2c13124e-6a42-4fb7-9b7f-66eb9c634b87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "seen", "source": "https://t.me/reverseame/3338", "content": "Git Arbitrary Configuration Injection (CVE-2023-29007) https://blog.ethiack.com/en/blog/git-arbitrary-configuration-injection-cve-2023-29007", "creation_timestamp": "2026-07-29T12:02:29.781732Z"}, {"uuid": "ee5321bf-b02d-4f42-b492-ffef110c8c5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "seen", "source": "https://t.me/CVEhub/12351", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-29007_win-version*\nGithub: https://github.com/x-Defender/CVE-2023-29007_win-version", "creation_timestamp": "2026-07-30T00:00:59.003600Z"}, {"uuid": "6f554043-37a0-4bf5-bfca-8c28cfc32b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "seen", "source": "https://t.me/CVEhub/12349", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-29007_win-git*\nGithub: https://github.com/x-Defender/CVE-2023-29007_win-git", "creation_timestamp": "2026-07-30T00:00:59.198246Z"}, {"uuid": "361c21f3-e472-4c5f-bcef-f180d6fa7a1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "seen", "source": "https://t.me/CVEhub/12201", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *git_for_windows-CVE-2023-29007*\nGithub: https://github.com/x-Defender/git_for_windows-CVE-2023-29007", "creation_timestamp": "2026-07-30T00:00:59.615887Z"}, {"uuid": "ae2567ce-5191-4ea6-94b5-8d6a026e684c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "seen", "source": "https://t.me/CVEhub/12084", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-29007*\nGithub: https://github.com/omespino/CVE-2023-29007", "creation_timestamp": "2026-07-30T00:00:59.821288Z"}, {"uuid": "b4fe29b8-2753-4d9a-9f84-9284491ca4c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "seen", "source": "https://t.me/CVEhub/11628", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-29007*\nGithub: https://github.com/ethiack/CVE-2023-29007", "creation_timestamp": "2026-07-30T00:01:02.037128Z"}, {"uuid": "35a7f0cc-49e8-44df-a4d9-dce34460df95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29007", "type": "seen", "source": "https://t.me/reverseame/3338", "content": "Git Arbitrary Configuration Injection (CVE-2023-29007) https://blog.ethiack.com/en/blog/git-arbitrary-configuration-injection-cve-2023-29007", "creation_timestamp": "2026-07-30T00:02:30.474485Z"}]}