CVE-2024-32002 — Path Traversal in GIT
CWE-22 — Path TraversalCWE-434 — Unrestricted File UploadCWE-59 — Link Following19 documents13 sources
Severity
9.0CRITICALNVD
OSV2.2
EPSS
80.4%
top 0.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Timeline
PublishedMay 14
Latest updateSep 19
Description
Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be fooled into writing files not into the submodule's worktree but into a `.git/` directory. This allows writing a hook that will be executed while the clone operation is still running, giving the user no opportunity to inspect the code that is being executed. The problem has been patched in …
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:HExploitability: 2.2 | Impact: 6.0
Patches
🔴Vulnerability Details
5📋Vendor Advisories
8🕵️Threat Intelligence
4Tenable
▶