ID:11847 - Exploit for CRLF injection in Git - CVE-2025-48384

Link to public exploit:

Vulnerability description

The vulnerability allows a remote user to compromise the affected system.

The vulnerability exists due to insufficient validation of attacker-supplied data when reading config values. A remote user can pass specially crafted config lines to the application containing CR-LF characters and execute arbitrary code on the system after checkout.

Remediation