cve-2024-32002-poc

💥 CVE-2024-32002 – Git Submodule Path Injection PoC Motivación Durante la resolución de la máquina Compiled de la plataforma Hack The Box, me encontré con un comportamiento curioso relacionado con Git y los submódulos. Al investigar más a fondo, encontré este excelente post del investigador Amal...

CVE-2023-51385_test

Verify CVE-2023-51385 First, add the following content to /.ssh/config root@kitploit: host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p Command injection exists in the .gitmodules file statement root@kitploit: url = ssh://echo helloworld cve.txtfoo.example.com/bar Afte...

cve-2023-51385

Verificación de CVE-2023-51385 Primero, necesitas añadir el siguiente contenido a /.ssh/config: root@kitploit: host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p Existe una inyección de comandos en la declaración del archivo .gitmodules root@kitploit: url = ssh://echo...

CVE-2017-1000117

CVE-2017-1000117 ¿Cómo funciona? root@kitploit: $ git clone --recursive [email protected]:ikmski/CVE-2017-1000117.git Cómo crear este repositorio root@kitploit: $ cat message.txt | gzip | base64 command $ git submodule add [email protected]:ikmski/Hello-World.git subs/CVE-2017-1000117 $...

CVE-2018-11235

CVE-2018-11235 Resumen de la vulnerabilidad Nombre de la vulnerabilidad: Vulnerabilidad de seguridad de Git ID CNNVD: CNNVD-201805-1020 Nivel de peligro: Alto ID CVE: CVE-2018-11235 Tipo de vulnerabilidad: Problema de característica de seguridad Fecha de publicación: 2018-05-31 Tipo de amenaza:...

CVE-2017-1000117

CVE-2017-1000117 Malicious actors can craft "ssh://…" links to trick victims into accessing the malicious link when executing programs, thereby achieving command execution. This link can be placed in the .gitmodules file of a git project, so that when a victim performs git clone...

CVE-2023-51385_test

Verifica di CVE-2023-51385 Prima è necessario aggiungere quanto segue in /.ssh/config root@kitploit: host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p Nel file .gitmodules è presente un'iniezione di comandi nella dichiarazione root@kitploit: url = ssh://echo helloworld...

cve-2024-32002-poc-rce

CVE-2024-32002 RCE POC Un POC per CVE-2024-32002 che dimostra l'esecuzione remota di codice RCE. Vedi cve-2024-32002-poc-rce per il repository del sottomodulo correlato. Cosa contiene questo repo Un symlink con un nome arbitrario che punta alla directory .git. Un file .gitmodules che definisce il...

CVE-2026-82253

gitoxide Rust crates gix = 0.72.0 and gix-validate = 0.10.0 contains a path traversal vulnerability. The submodule name validation function in gix-validate only checks the first occurrence of '..' via name.findb"..", allowing crafted names such as 'a..b/../../../.git/' to bypass the check;...

CVE-2026-82252

gitoxide before 0.52.1 follows symlinks when reading the worktree .gitmodules file, allowing attackers to inject out-of-repository bytes into submodule metadata. Attackers can create a malicious repository with a symlinked .gitmodules pointing outside the repository tree, causing gitoxide to pars...

CVE-2026-82251

gitoxide before 0.52.1 fails to validate submodule names from .gitmodules configuration, allowing path traversal when deriving submodule git directories. Attackers can craft malicious submodule names with traversal segments to redirect state and open functions to repositories outside .git/modules...

CVE-2026-82252

gitoxide before 0.52.1 is vulnerable to a repository boundary violation via symlinked .gitmodules files. When reading the worktree .gitmodules file, gitoxide follows symlinks, allowing an attacker to create a malicious repository where .gitmodules points outside the repository tree. This causes g...

EUVD-2026-67703

gitoxide before 0.52.1 fails to validate submodule names from .gitmodules configuration, allowing path traversal when deriving submodule git directories. Attackers can craft malicious submodule names with traversal segments to redirect state and open functions to repositories outside .git/modules...

CVE-2026-82251 gitoxide before 0.52.1 Path Traversal via Submodule Name

gitoxide before 0.52.1 fails to validate submodule names from .gitmodules configuration, allowing path traversal when deriving submodule git directories. Attackers can craft malicious submodule names with traversal segments to redirect state and open functions to repositories outside .git/modules...

CVE-2026-82251 gitoxide before 0.52.1 Path Traversal via Submodule Name

gitoxide before 0.52.1 fails to validate submodule names from .gitmodules configuration, allowing path traversal when deriving submodule git directories. Attackers can craft malicious submodule names with traversal segments to redirect state and open functions to repositories outside .git/modules...

CVE-2026-82252 gitoxide before 0.52.1 Repository Boundary Violation via symlinked .gitmodules

gitoxide before 0.52.1 follows symlinks when reading the worktree .gitmodules file, allowing attackers to inject out-of-repository bytes into submodule metadata. Attackers can create a malicious repository with a symlinked .gitmodules pointing outside the repository tree, causing gitoxide to pars...

EUVD-2026-67704

gitoxide before 0.52.1 follows symlinks when reading the worktree .gitmodules file, allowing attackers to inject out-of-repository bytes into submodule metadata. Attackers can create a malicious repository with a symlinked .gitmodules pointing outside the repository tree, causing gitoxide to pars...

CVE-2026-82251

gitoxide before 0.52.1 fails to validate submodule names read from the .gitmodules configuration, enabling a path traversal vulnerability when deriving submodule git directories. An attacker can craft malicious submodule names containing traversal segments to redirect state() and open() calls to ...

CVE-2026-82251 gitoxide before 0.52.1 Path Traversal via Submodule Name

gitoxide before 0.52.1 fails to validate submodule names from .gitmodules configuration, allowing path traversal when deriving submodule git directories. Attackers can craft malicious submodule names with traversal segments to redirect state and open functions to repositories outside .git/modules...

CVE-2026-82252 gitoxide before 0.52.1 Repository Boundary Violation via symlinked .gitmodules

gitoxide before 0.52.1 follows symlinks when reading the worktree .gitmodules file, allowing attackers to inject out-of-repository bytes into submodule metadata. Attackers can create a malicious repository with a symlinked .gitmodules pointing outside the repository tree, causing gitoxide to pars...