KLA20184 Multiple vulnerabilities in Git for Windows

Detect date:

10/18/2022

Severity:

High

Description:

Multiple vulnerabilities were found in Git for Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code.

Exploitation:

Public exploits exist for this vulnerability.

Affected products:

Git for Windows earlier than 2.38.1

Solution:

Update to the latest version
Git – Downloading Package

Original advisories:

Git security vulnerabilities announced

Impacts:

ACE

Related products:

Git for Windows

CVE-IDS:

CVE-2022-392535.5High
CVE-2022-392608.8Critical