CVE-2023-23946 Exploit

Functional, self-developed Proof-of-Concept (PoC) exploit for CVE-2023-23946, a path traversal vulnerability in Git (affecting versions prior to 2.39.2, 2.38.4, 2.37.6, etc.) that allows writing files outside the working tree via crafted patches during git apply.

Contains a standalone exploit payload generator, demonstration environment, and technical breakdown of the path sanitization bypass.

Demonstration

Usage

git clone https://github.com/tralsesec/CVE-2023-23946.git
cd CVE-2023-23946
chmod +x exploit.sh
./exploit.sh

Disclaimer

This software is provided strictly for educational purposes and authorized security testing. The authors are not responsible for any direct or indirect harm, damage, or legal consequences resulting from the use of this tool. Use at your own risk.