← Back to browse · API

CVE-2025-48384

Severity
HIGH
CVSS
8.1
EPSS
0.02839
Risk score
58.39
CISA KEV
Yes
PoC
No
Published
2025-08-25
Modified
2025-08-25
First seen
2026-08-07
Aliases
EUVD-2025-20677
Products
Git:Git, git-for-windows:Git 2.44.0-rc0, < 2.44.4, git-for-windows:Git 2.45.0-rc0, < 2.45.4, git-for-windows:Git 2.46.0-rc0, < 2.46.4, git-for-windows:Git 2.47.0-rc0, < 2.47.3, git-for-windows:Git 2.48.0-rc0, < 2.48.2, git-for-windows:Git 2.49.0-rc0, < 2.49.1, git-for-windows:Git 2.50.0-rc0, < 2.50.1, git-for-windows:Git < 2.43.7
Sources
cisa.gov CVE-2025-48384
euvd EUVD-2025-20677

Description

Git contains a link following vulnerability that stems from Git’s inconsistent handling of carriage return characters in configuration files.

References