What happened
Git contains a link following vulnerability that stems from Git’s inconsistent handling of carriage return characters in configuration files.
Affected versions
Git: See original advisory Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
PoC-in-GitHub · acheong08/CVE-2025-48384Breaking git with a carriage return and cloning RCE★ 53acheong082025-07-08CandidatePoC-in-GitHub · fishyyh/CVE-2025-48384for CVE-2025-48384 test★ 0fishyyh2025-07-09CandidatePoC-in-GitHub · kallydev/cve-2025-48384-hook★ 0kallydev2025-07-09CandidatePoC-in-GitHub · fishyyh/CVE-2025-48384-POC★ 0fishyyh2025-07-09CandidatePoC-in-GitHub · liamg/CVE-2025-48384-submodule★ 0liamg2025-07-09CandidatePoC-in-GitHub · liamg/CVE-2025-48384PoC for CVE-2025-48384★ 20liamg2025-07-09CandidatePoC-in-GitHub · ppd520/CVE-2025-48384★ 0ppd5202025-07-09CandidatePoC-in-GitHub · NigelX/CVE-2025-48384漏洞测试★ 0NigelX2025-07-10CandidatePoC-in-GitHub · greatyy/CVE-2025-48384-p★ 0greatyy2025-07-10CandidatePoC-in-GitHub · testdjshan/CVE-2025-48384CVE-2025-48384★ 0testdjshan2025-07-10CandidatePoC-in-GitHub · altm4n/cve-2025-48384★ 0altm4n2025-07-10CandidatePoC-in-GitHub · altm4n/cve-2025-48384-hub★ 0altm4n2025-07-10CandidatePoC-in-GitHub · vinieger/vinieger-CVE-2025-48384-DockerfilePoC dockerfile image for CVE-2025-48384★ 1vinieger2025-07-11CandidatePoC-in-GitHub · ECHO6789/CVE-2025-48384-submodule★ 0ECHO67892025-07-15CandidatePoC-in-GitHub · nguyentranbaotran/cve-2025-48384-poc★ 0nguyentranbaotran2025-07-16CandidatePoC-in-GitHub · admin-ping/CVE-2025-48384-RCE★ 0admin-ping2025-07-17CandidatePoC-in-GitHub · Anezatraa/CVE-2025-48384-submodule★ 0Anezatraa2025-07-19CandidatePoC-in-GitHub · IK-20211125/CVE-2025-48384CVE-2025-48384 PoC★ 1IK-202111252025-07-20CandidatePoC-in-GitHub · elprogramadorgt/CVE-2025-48384★ 0elprogramadorgt2025-07-25CandidatePoC-in-GitHub · fluoworite/CVE-2025-48384PoC for CVE-2025-48384★ 0fluoworite2025-08-03CandidatePoC-in-GitHub · fluoworite/CVE-2025-48384-sub★ 0fluoworite2025-08-03CandidatePoC-in-GitHub · beishanxueyuan/CVE-2025-48384★ 0beishanxueyuan2025-08-03CandidatePoC-in-GitHub · beishanxueyuan/CVE-2025-48384-test★ 1beishanxueyuan2025-08-04CandidatePoC-in-GitHub · replicatorbot/CVE-2025-48384★ 0replicatorbot2025-08-20CandidatePoC-in-GitHub · replicatorbot/CVE-2025-48384-POC★ 0replicatorbot2025-08-20CandidatePoC-in-GitHub · eliox01/CVE-2025-48384PoC★ 0eliox012025-08-25CandidatePoC-in-GitHub · jacobholtz/CVE-2025-48384-pocPoC for CVE-2025-48384★ 0jacobholtz2025-08-28CandidatePoC-in-GitHub · jacobholtz/CVE-2025-48384-submodule★ 0jacobholtz2025-08-28CandidatePoC-in-GitHub · butyraldehyde/CVE-2025-48384-PoC-Part2RCE hook★ 0butyraldehyde2025-08-28CandidatePoC-in-GitHub · butyraldehyde/CVE-2025-48384-PoCBuilt to call on CVE-2025-48384-PoC-Part2 for RCE★ 0butyraldehyde2025-08-28CandidatePoC-in-GitHub · arun1033/CVE-2025-48384★ 0arun10332025-08-29CandidatePoC-in-GitHub · s41r4j/CVE-2025-48384GIT vulnerability | Carriage Return and RCE on cloning★ 0s41r4j2025-09-12CandidatePoC-in-GitHub · s41r4j/CVE-2025-48384-submoduleCVE-2025-48384-submodule★ 0s41r4j2025-09-13CandidatePoC-in-GitHub · mukesh-610/cve-2025-48384-exploit★ 0mukesh-6102025-10-14CandidatePoC-in-GitHub · mukesh-610/cve-2025-48384★ 0mukesh-6102025-10-14CandidatePoC-in-GitHub · MarcoTondolo/cve-2025-48384-poc★ 0MarcoTondolo2025-10-31CandidatePoC-in-GitHub · zr0n/CVE-2025-48384-sub★ 1zr0n2025-12-04CandidatePoC-in-GitHub · zr0n/CVE-2025-48384-mainA proof of concept of remote code execution★ 1zr0n2025-12-04CandidatePoC-in-GitHub · vignesh21-git/CVE-2025-48384GIT vulnerability | Carriage Return and RCE on cloning★ 0vignesh21-git2025-12-14CandidatePoC-in-GitHub · vignesh21-git/CVE-2025-48384-submoduleTest★ 0vignesh21-git2025-12-14CandidatePoC-in-GitHub · sathish46-lab/CVE-2025-48384-submodule★ 0sathish46-lab2026-04-07CandidatePoC-in-GitHub · iustin24/gitssrf-gim-cve-parentgitssrf-gim CVE-2025-48384 parent★ 0iustin242026-09-07CandidateSource timeline
Discovered through CISA Known Exploited VulnerabilitiesView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.