All of the now-patched vulnerabilities stem from credential helpers' inadequate authentication request parsing, with exploitation of the carriage return smuggling issues in GitHub Desktop and Git Credential Manager, and the Git LFS newline injection bug facilitating GitHub credential delivery to attackers' server.
Introduction to Malware Binary Triage (IMBT) Course
Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.
Enroll Now and Save 10%: Coupon Code MWNEWS10
Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.
Article Link: Git vulnerabilities threaten credential compromise | SC Media