Java Tech Enthusiast
May 28, 2024 · Information Security
Remote Code Execution Vulnerability in Git (CVE-2024-32002) Explained
Git’s CVE‑2024‑32002 is a critical remote‑code‑execution flaw where a malicious repository can exploit hooks, submodules, and symlinks on case‑insensitive file systems to inject and run attacker‑controlled scripts during a recursive clone, affecting versions up to 2.45.0 and mitigated by disabling recursive submodule fetching, avoiding untrusted clones, and updating Git.
CVE-2024-32002HooksRCE
0 likes · 9 min read