CVE-2025-21613
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Jan 6, 2025
CWE ID 88
Summary
CVE-2025-21613 is a vulnerability affecting go-git, a widely-used Git implementation library written in Go. Prior to version 5.13, go-git contained an argument injection flaw. This issue enabled attackers to manipulate git-upload-pack flags, which could result in arbitrary code execution. Notably, this vulnerability was specific to the file transport protocol, making it exploitable only when this protocol was used. The latest version, 5.13.0, has addressed this security concern.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.