Technical Information

Brief overview of the risk:

This is a remote code execution vulnerability affecting Git, an open-source distributed revision control system. On case-insensitive file systems supporting symbolic links the ‘git clone’ feature of Git can be exploited to execute code on the file system during cloning of a specially crafted repository containing symbolic links and files using clean/smudge filters such as Git LFS. Git LFS(Large File Storage is used when handling large files such as audio and video) is configured by Git on Windows machines by default. The workaround for this vulnerability is to disable symbolic links or to avoid configuring clean/smudge filters such as Git LFS globally if updating to a newer Git version is not possible.

Further information on this vulnerability is available at : CVE-2021-21300