CVE-2023-49569

CVE-2023-49569 is a critical path traversal vulnerability in go-git versions prior to v5.11, specifically affecting applications using the ChrootOS default configuration. This flaw allows an unauthenticated attacker to create and modify arbitrary files on the filesystem, potentially leading to remote code execution. With a CVSS score of 9.8 (Critical), the vulnerability is easily exploitable over the network with low attack complexity and no user interaction required. While there is no evidence of active exploitation, public exploit code, or KEV listing, the vulnerability has garnered some community discussion, indicating awareness.