Beveiligingsadvies

CVE-2025-66413

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-10 20:34:32
Laatst bijgewerkt 2026-03-11 14:33:36
Toegewezen door GitHub_M
CVSS-score 7.4
Status PUBLISHED

Beschrijving

Git for Windows is the Windows port of Git. Prior to 2.53.0(2), it is possible to obtain a user's NTLM hash by tricking them into cloning from a malicious server. Since NTLM hashing is weak, it is possible for the attacker to brute-force the user's account name and password. This vulnerability is fixed in 2.53.0(2).