CVE-2025-48384:

CVE-2025-48384 is a vulnerability in Git that can lead to the execution of unintended scripts due to improper handling of trailing carriage returns in configuration values, potentially allowing for malicious actions during submodule initialization.

Score
A numerical rating that indicates how dangerous this vulnerability is.

8.0High

Published Date:Jul 8, 2025
CISA KEV Date:Aug 25, 2025
Industries Affected:20

Armis Early Warning:

48 Days

Threat Predictions

EPSS Score:0.5
EPSS Percentile:65%

Exploitability

Score:1.3
Attack Vector:NETWORK
Attack Complexity:HIGH
Privileges Required:LOW
User Interaction:REQUIRED
Scope:CHANGED

Impact

Score:6.0
Confidentiality Impact:HIGH
Integrity Impact:HIGH
Availability Impact:HIGH

Description Preview

Overview

- **CVE ID**: CVE-2025-48384 - **Published Date**: July 8, 2025 - **Severity**: High (CVSS Base Score: 8.0) - **Attack Vector**: Network - **Attack Complexity**: High - **Privileges Required**: Low - **User Interaction**: Required - **Impact**: High on confidentiality, integrity, and availability - **Weaknesses**: CWE-59 (Improper Link Resolution), CWE-436 (Declaration of Intent)

Remediation

To mitigate the risks associated with CVE-2025-48384, users are advised to upgrade to one of the fixed versions of Git. The following versions contain the necessary patches:
v2.43.7
v2.44.4
v2.45.4
v2.46.4
v2.47.3
v2.48.2
v2.49.1
v2.50.1
It is recommended to regularly check for updates and apply them promptly to ensure the security of the system.