tralsesec/cve-2023-23946Original standalone Proof-of-Concept exploit for CVE-2023-23946 (Git path traversal via crafted patches in git-apply).
Functional, self-developed Proof-of-Concept (PoC) exploit for CVE-2023-23946, a path traversal vulnerability in Git (affecting versions prior to 2.39.2, 2.38.4, 2.37.6, etc.) that allows writing files outside the working tree via crafted patches during git apply.
Contains a standalone exploit payload generator, demonstration environment, and technical breakdown of the path sanitization bypass.
git clone https://github.com/tralsesec/CVE-2023-23946.git
cd CVE-2023-23946
chmod +x exploit.sh
./exploit.sh
This software is provided strictly for educational purposes and authorized security testing. The authors are not responsible for any direct or indirect harm, damage, or legal consequences resulting from the use of this tool. Use at your own risk.