CVE-2018-11235
HIGH 7.8EPSS 48.8%
In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur. With a crafted .gitmodules file, a malicious project can execute an arbitrary script on a machine that runs "git clone --recurse-submodules" because submodule "names" are obtained from this file, and then appended to $GIT_DIR/modules, leading to directory traversal with "../" in a name. Finally, post-checkout hooks from a submodule are executed, bypassing the intended design in which hooks are not obtained from a remote server.
- CVSS v3.0
- 7.8 HIGH
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS v2.0
- 6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P - EPSS
- 48.75% chance of exploitation in the next 30 days, 99th percentile
- Published
- 2018-05-30
- Updated
- 2024-08-05
Proof-of-concept exploits (25)
- https://www.exploit-db.com/exploits/44822/
- AnonymKing/CVE-2017-10001173★ · 2019-06-21
- AnonymKing/CVE-2018-112351★ · 2019-06-22
- CHYbeta/CVE-2018-11235-DEMO14★ · 2018-06-07
- Flashyy911/pentesterlab0★ · 2020-06-15
- H0K5/clone_and_pwn0★ · 2018-06-06
- JameelNabbo/git-remote-code-execution1★ · 2018-06-04
- Kiss-sh0t/CVE-2018-11235-poc0★ · 2018-06-06
- Rogdham/CVE-2018-1123548★ · 2020-10-25
- fadidxb/repository10★ · 2018-06-06
- fadidxb/repository20★ · 2018-06-06
- j4k0m/CVE-2018-112352★ · 2021-09-22
- jongmartinez/CVE-2018-11235-PoC0★ · 2020-10-25
- knqyf263/CVE-2018-112350★ · 2018-11-23
- moajo/cve_2018_112350★ · 2018-11-24
- nerdyamigo/pop1★ · 2020-10-19
- nthuong95/CVE-2018-112350★ · 2020-03-05
- qweraqq/CVE-2018-11235-Git-Submodule-CE3★ · 2021-10-21
- russemandev/repository10★ · 2018-06-06
- russemandev/repository20★ · 2018-06-06
- twseptian/cve-2018-11235-git-submodule-ce-and-docker-ngrok-configuration0★ · 2022-03-02
- vmotos/CVE-2018-112350★ · 2018-05-31
- xElkomy/CVE-2018-112350★ · 2020-07-12
- ygouzerh/CVE-2018-112351★ · 2019-05-14
- Rezy-Dev/CVE-2018-11235