PT-2025-2874 · Git+10 · Git+10

Dschop · Published 2025-01-14 · Updated 2026-01-15 · CVE-2024-50349

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Git versions prior to v2.48.1 Git versions prior to v2.47.2 Git versions prior to v2.46.3 Git versions prior to v2.45.3 Git versions prior to v2.44.3 Git versions prior to v2.43.6 Git versions prior to v2.42.4 Git versions prior to v2.41.3 Git versions prior to v2.40.4

Description The issue is related to the ANSI Escape Sequence Handler component in Git, which is a distributed revision control system. It allows attackers to craft URLs containing ANSI escape sequences that can confuse users into providing passwords for trusted Git hosting sites, which are then sent to untrusted sites under the attacker's control. This is possible because Git prints the host name for which the user is expected to provide a username and/or a password via a terminal prompt without using any credential helper, and any URL-encoded parts have been decoded already and are printed verbatim.

Recommendations For Git versions prior to v2.48.1, upgrade to v2.48.1 or later. For Git versions prior to v2.47.2, upgrade to v2.47.2 or later. For Git versions prior to v2.46.3, upgrade to v2.46.3 or later. For Git versions prior to v2.45.3, upgrade to v2.45.3 or later. For Git versions prior to v2.44.3, upgrade to v2.44.3 or later. For Git versions prior to v2.43.6, upgrade to v2.43.6 or later. For Git versions prior to v2.42.4, upgrade to v2.42.4 or later. For Git versions prior to v2.41.3, upgrade to v2.41.3 or later. For Git versions prior to v2.40.4, upgrade to v2.40.4 or later. As a temporary workaround, users unable to upgrade should avoid cloning from untrusted URLs, especially recursive clones.

Exploit

Fix

Improper Encoding or Escaping of Output

Weakness Enumeration

CWE-147

CWE-150

CWE-116

Related Identifiers

ALSA-2025:11462

ALSA-2025:11533

ALSA-2025:11534

ALSA-2025_11462

ALSA-2025_11534

ALT-PU-2025-10893

ALT-PU-2025-1641

ALT-PU-2025-1942

ALT-PU-2025-2059

AZL-55640

AZL-55689

BDU:2025-01175

BIT-GIT-2024-50349

CESA-2025_11534

CVE-2024-50349

DLA-4031-1

DSA-5850-1

GHSA-HMG8-H7QF-7CXR

INFSA-2025_11462

INFSA-2025_11534

MGASA-2025-0016

OESA-2025-1068

OPENSUSE-SU-2025:14652-1

OPENSUSE-SU-2025_0116-1

OPENSUSE-SU-2025_0144-1

RHSA-2025:11462

RHSA-2025:11533

RHSA-2025:11534

RHSA-2025:19601

RHSA-2025_11462

RHSA-2025_11534

SUSE-RU-2025:20362-1

SUSE-SU-2025:0116-1

SUSE-SU-2025:0144-1

SUSE-SU-2025:0197-1

SUSE-SU-2025:20197-1

SUSE-SU-2025:20721-1

SUSE-SU-2025_0116-1

SUSE-SU-2025_0144-1

SUSE-SU-2025_0197-1

USN-7207-1

USN-7207-2

USN-7964-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Git

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 123

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50349.json · Exploit
• https://github.com/git/git/commit/7725b8100ffbbff2750ee4d61a0fcc1f53a086e8 · Patch
• https://github.com/git/git/commit/c903985bf7e772e2d08275c1a95c8a55ab011577 · Patch
• https://github.com/git/git/security/advisories/GHSA-hmg8-h7qf-7cxr · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2025-11462.html · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7964-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-55689 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-11462.html · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7207-1 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2025-11534.html · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4031-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0923SE17 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7207-2 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-50349 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-11534.html · Vendor Advisory