[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fJ0GqA8vZyX1TdbjEo9fXOPRg2u4CmSFr3LjKF3gt58Y":3,"g5a-risk:CVE-2025-48384":190},{"success":4,"data":5,"meta":187},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":31,"epssPercentile":26,"epssTimeSeries":32,"severity":33,"affectedProducts":34,"affectedProductsCount":49,"references":50,"referencesCount":75,"weaknesses":76,"weaknessesCount":92,"isActivelyExploited":4,"cisaInfo":93,"otxData":26,"relatedBlogPosts":94,"seoMetadata":95,"configurations":120,"relatedVendorCves":171,"notableEvents":172},"CVE-2025-48384","What is CVE-2025-48384?","Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). When writing a config entry, values with a trailing CR are not quoted, causing the CR to be lost when the config is later read. When initializing a submodule, if the submodule path contains a trailing CR, the altered path is read resulting in the submodule being checked out to an incorrect location. If a symlink exists that points the altered path to the submodule hooks directory, and the submodule contains an executable post-checkout hook, the script may be unintentionally executed after checkout. This vulnerability is fixed in v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1.","Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to i...","2025-07-08T19:15:42.8","2025-11-04T22:16:16.783",8,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":30,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"security-advisories@github.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","HIGH","LOW","REQUIRED","CHANGED",null,1.3,6,[],[],0.04379,[31,31,31,31,31,31,31],"High",[35,40,45],{"vendor":36,"product":37,"version":38,"criteria":39,"vulnerable":4},"git-scm","git","*","cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",{"vendor":41,"product":42,"version":43,"criteria":44,"vulnerable":4},"debian","debian_linux","11.0","cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":38,"criteria":48,"vulnerable":4},"apple","xcode","cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:*",3,[51,56,62,66,70],{"url":52,"source":53,"tags":54},"https:\u002F\u002Fgithub.com\u002Fgit\u002Fgit\u002Fsecurity\u002Fadvisories\u002FGHSA-vwqx-4fm8-6qc9","GitHub",[55],"Vendor Advisory",{"url":57,"source":58,"tags":59},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FSep\u002F60","Seclists",[60,61],"Mailing List","Third Party Advisory",{"url":63,"source":64,"tags":65},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2025\u002F07\u002F08\u002F4","Openwall",[],{"url":67,"source":68,"tags":69},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F10\u002Fmsg00003.html","Debian",[60,61],{"url":71,"source":72,"tags":73},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2025-48384","CISA",[74],"US Government Resource",5,[77,85],{"id":78,"name":79,"description":80,"extendedDescription":81,"status":82,"abstraction":83,"structure":84},"CWE-59","Improper Link Resolution Before File Access ('Link Following')","The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.","","Draft","Base","Simple",{"id":86,"name":87,"description":88,"extendedDescription":89,"status":90,"abstraction":91,"structure":84},"CWE-436","Interpretation Conflict","Product A handles inputs or steps differently than Product B, which causes A to perform incorrect actions based on its perception of B's state.","This is generally found in proxies, firewalls, anti-virus software, and other intermediary devices that monitor, allow, deny, or modify traffic based on how the client or server is expected to behave.","Incomplete","Class",2,{"shortDescription":81,"requiredAction":81,"vulnerabilityName":81,"dateAdded":26},[],{"title":96,"metaDescription":97,"keywords":98,"canonicalUrl":99,"structuredData":100},"What is CVE-2025-48384? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-48384, a high severity cyber security vulnerability from 2025. Git is a fast, scalable, distributed revision control syste...","CVE-2025-48384, CVE-2025-48384 vulnerability, CVE-2025-48384 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, git-scm security, debian security, apple security, git vulnerability, debian_linux vulnerability, xcode vulnerability","\u002Fwhat-is\u002Fcve-2025-48384",{"@context":101,"@type":102,"headline":96,"description":97,"datePublished":10,"dateModified":11,"author":103,"publisher":107,"about":111,"mainEntityOfPage":115,"articleSection":118,"keywords":119},"https:\u002F\u002Fschema.org","TechArticle",{"@type":104,"name":105,"url":106},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":104,"name":105,"url":106,"logo":108},{"@type":109,"url":110},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":112,"name":6,"description":113,"additionalType":114},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":116,"@id":117},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-48384","Cybersecurity","CVE-2025-48384, CVE-2025-48384 vulnerability, CVE-2025-48384 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[121,158,164],{"Operator":26,"Negate":26,"Nodes":122},[123],{"Operator":124,"Negate":125,"CPEMatch":126},"OR",false,[127,130,134,138,142,146,150,154],{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":128,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":129,"VersionEndIncluding":26},"BB276680-D286-4DF6-BCB7-CAC1D9D77E08","2.43.7",{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":131,"VersionStartExcluding":26,"VersionStartIncluding":132,"VersionEndExcluding":133,"VersionEndIncluding":26},"856A8970-74E2-4F8F-A1A6-2AB1C0C87E45","2.44.0","2.44.4",{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":135,"VersionStartExcluding":26,"VersionStartIncluding":136,"VersionEndExcluding":137,"VersionEndIncluding":26},"6D1DB9BA-3D91-4F7D-931E-A664737129F0","2.45.0","2.45.4",{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":139,"VersionStartExcluding":26,"VersionStartIncluding":140,"VersionEndExcluding":141,"VersionEndIncluding":26},"01BDA55C-F398-4286-ABC6-979A783BDC65","2.46.0","2.46.4",{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":143,"VersionStartExcluding":26,"VersionStartIncluding":144,"VersionEndExcluding":145,"VersionEndIncluding":26},"FF4A2ACC-0996-4869-884D-734D6006C032","2.47.0","2.47.3",{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":147,"VersionStartExcluding":26,"VersionStartIncluding":148,"VersionEndExcluding":149,"VersionEndIncluding":26},"0DD21A83-8D62-4EE4-914B-B5ACA19A84A2","2.48.0","2.48.2",{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":151,"VersionStartExcluding":26,"VersionStartIncluding":152,"VersionEndExcluding":153,"VersionEndIncluding":26},"95C1825C-B7A2-46E9-93D7-2D196DB2515E","2.49.0","2.49.1",{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":155,"VersionStartExcluding":26,"VersionStartIncluding":156,"VersionEndExcluding":157,"VersionEndIncluding":26},"18F948AD-22C0-4B2E-B497-899F3A94B70A","2.50.0","2.50.1",{"Operator":26,"Negate":26,"Nodes":159},[160],{"Operator":124,"Negate":125,"CPEMatch":161},[162],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":163,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"FA6FEEC2-9F11-4643-8827-749718254FED",{"Operator":26,"Negate":26,"Nodes":165},[166],{"Operator":124,"Negate":125,"CPEMatch":167},[168],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":169,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":170,"VersionEndIncluding":26},"37CC7F40-CC3A-4AEB-9260-B621FE64735A","26.0",[],[173,180],{"id":174,"eventType":175,"eventTime":176,"details":177,"label":178,"color":179},"7d409e3e-2f5d-44d8-afc7-bcf338714af3","NEW_NVD","2025-07-22T19:33:21.649339+00:00","New CVE added to NVD","Published to NVD","blue",{"id":181,"eventType":182,"eventTime":183,"details":184,"label":185,"color":186},"3c6f058e-0b00-45b7-88f5-dd64d461ee86","NEW_CISA","2025-08-26T04:01:07.458031+00:00","CVE added to CISA Known Exploited Vulnerabilities","Added to CISA KEV","red",{"lastModified":11,"cacheTime":188,"version":189},1792256949171,"2.0",{"score":191,"band":33,"action":192,"scoredAt":193},74,"Emergency patch","2026-10-16T07:08:00.227709+00:00"]