CVE-2023-25815

CVE-2023-25815 is a low-severity vulnerability affecting Git for Windows versions prior to 2.40.1, where a change in gettext initialization allows low-privilege local users to place malicious localized messages in a hard-coded path. This could lead to social engineering attacks by displaying fake messages to users. The attack requires local write access and user interaction, making it difficult to exploit. There is no evidence of active exploitation, public exploit code, or significant community discussion, though it has received some media coverage.