Skip to content
COOEY

EXPOSURES › CVE-2025-48384

CVE-2025-48384

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2025-08-25 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-48384 ↗
⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 72/100 exploited-in-wildunpatched

Git link following flaw exploited in wild

Git, a widely used version control system, suffered from a vulnerability that allowed attackers to exploit inconsistent handling of carriage return characters in configuration files, potentially leading to unauthorized code execution.

Shame score — Critical vulnerability actively exploited with potential for unauthorized code execution.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED
Git · vendorGit · product
DESCRIPTION

Git contains a link following vulnerability that stems from Git’s inconsistent handling of carriage return characters in configuration files.

AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.