PT-2025-31442 · Gitproxy · Git-Proxy

Dgl · Published 2025-07-30 · Updated 2025-07-30 · CVE-2025-54583

Positive Technologies (AI Summary)

CVSS v4.0

8.3

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N

Name of the Vulnerable Software and Affected Versions GitProxy versions 1.19.1 and below

Description GitProxy is an application that acts as an intermediary between developers and Git remote endpoints. Versions 1.19.1 and below permit users to bypass policies and explicit approvals when pushing to remote repositories. Specifically, checks and plugins are skipped, potentially allowing the introduction of secrets or unwanted changes into a repository.

Recommendations Update to version 1.19.2 or later.

Exploit

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2025-54583

GHSA-QR93-8WWF-22G4

Affected Products

Git-Proxy

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/54xxx/CVE-2025-54583.json · Exploit
• 🔥 https://github.com/finos/git-proxy/security/advisories/GHSA-qr93-8wwf-22g4 · Exploit
• https://github.com/finos/git-proxy/commit/bd2ecb2099cba21bca3941ee4d655d2eb887b3a9 · Patch
• https://github.com/finos/git-proxy/commit/a620a2f33c39c78e01783a274580bf822af3cc3a · Patch
• https://github.com/finos/git-proxy/releases/tag/v1.19.2 · Patch
• https://osv.dev/vulnerability/GHSA-qr93-8wwf-22g4 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-54583 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54583 · Security Note
• https://github.com/finos/git-proxy · Note
• https://twitter.com/CVEnew/status/1950651995070554459 · Twitter Post
• https://t.me/CVEtracker/28784 · Telegram Post