CVE:CVE-2020-26233
CNNVD:CNNVD-202012-705
Git是一套免费、开源的分布式版本控制系统。
Git Credential Manager Core 存在SQL注入漏洞，如果顶级存储库中存在恶意的git.exe可执行文件，则该二进制文件将在尝试读取配置时由Git Credential Manager Core启动，而不是由％PATH％上的git.exe启动。 这仅影响Windows上的GCM Core。
solution:Upgrade microsoft git_credential_manager_core to a higher version than 2.0.289,and avoid the version (,2.0.289)
solution:Upgrade netgear ex7000_firmware to a higher version than 1.0.1.78,and avoid the version (,1.0.1.78); Upgrade netgear r6250_firmware to a higher version than 1.0.4.34,and avoid the version (,1.0.4.34); Upgrade netgear r6400_firmware to a higher version than 1.0.1.46,and avoid the version (,1.0.1.46); Upgrade netgear r6400v2_firmware to a higher version than 1.0.2.66,and avoid the version (,1.0.2.66); Upgrade netgear r7100lg_firmware to a higher version than 1.0.0.50,and avoid the version (,1.0.0.50); Upgrade netgear r7300dst_firmware to a higher version than 1.0.0.70,and avoid the version (,1.0.0.70); Upgrade netgear r7900_firmware to a higher version than 1.0.3.8,and avoid the version (,1.0.3.8); Upgrade netgear r8300_firmware to a higher version than 1.0.2.128,and avoid the version (,1.0.2.128); Upgrade netgear r8500_firmware to a higher version than 1.0.2.128,and avoid the version (,1.0.2.128)