CVE-2018-11235

HIGH

Debian Linux < 2.13.6 - Path Traversal

Title source: rule

Description

In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur. With a crafted .gitmodules file, a malicious project can execute an arbitrary script on a machine that runs "git clone --recurse-submodules" because submodule "names" are obtained from this file, and then appended to $GIT_DIR/modules, leading to directory traversal with "../" in a name. Finally, post-checkout hooks from a submodule are executed, bypassing the intended design in which hooks are not obtained from a remote server.

Exploits (26)

github WRITEUP 3,480 stars
by qazbnm456 · poc
https://github.com/qazbnm456/awesome-cve-poc/tree/master/CVE-2018-11235.md
nomisec WORKING POC 48 stars
by Rogdham · poc
https://github.com/Rogdham/CVE-2018-11235
github WRITEUP 14 stars
by xbl3 · poc
https://github.com/xbl3/awesome-cve-poc_qazbnm456/tree/master/CVE-2018-11235.md
nomisec WORKING POC 14 stars
by CHYbeta · poc
https://github.com/CHYbeta/CVE-2018-11235-DEMO
nomisec WORKING POC 3 stars
by qweraqq · poc
https://github.com/qweraqq/CVE-2018-11235-Git-Submodule-CE
nomisec WORKING POC 2 stars
by j4k0m · poc
https://github.com/j4k0m/CVE-2018-11235
nomisec WORKING POC 1 stars
by AnonymKing · poc
https://github.com/AnonymKing/CVE-2018-11235
nomisec WORKING POC 1 stars
by ygouzerh · poc
https://github.com/ygouzerh/CVE-2018-11235
gitlab WORKING POC
by jakobgoerke · poc
https://gitlab.com/jakobgoerke/CVE-2018-11235
gitlab WORKING POC
by Enigmatrix · poc
https://gitlab.com/Enigmatrix/cve-2018-11235
nomisec WORKING POC
by Rezy-Dev · poc
https://github.com/Rezy-Dev/CVE-2018-11235
nomisec WORKING POC
by twseptian · poc
https://github.com/twseptian/cve-2018-11235-git-submodule-ce-and-docker-ngrok-configuration
nomisec WORKING POC
by jongmartinez · poc
https://github.com/jongmartinez/CVE-2018-11235-PoC
nomisec STUB
by xElkomy · poc
https://github.com/xElkomy/CVE-2018-11235
nomisec STUB
by nthuong95 · poc
https://github.com/nthuong95/CVE-2018-11235
nomisec WORKING POC
by jhswartz · poc
https://github.com/jhswartz/CVE-2018-11235
nomisec STUB
by knqyf263 · poc
https://github.com/knqyf263/CVE-2018-11235
nomisec WORKING POC
by H0K5 · poc
https://github.com/H0K5/clone_and_pwn
nomisec WORKING POC
by Kiss-sh0t · poc
https://github.com/Kiss-sh0t/CVE-2018-11235-poc
nomisec WRITEUP
by vmotos · poc
https://github.com/vmotos/CVE-2018-11235

Scores

CVSS v3 7.8
EPSS 0.4172
EPSS Percentile 97.4%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-22
Status published
Products (14)
canonical/ubuntu_linux 14.04
canonical/ubuntu_linux 16.04
canonical/ubuntu_linux 17.10
canonical/ubuntu_linux 18.04
debian/debian_linux 8.0
debian/debian_linux 9.0
gitforwindows/git < 2.17.1
git-scm/git 2.17.0
git-scm/git < 2.13.6
redhat/enterprise_linux 7.0
... and 4 more
Published May 30, 2018
Tracked Since Feb 18, 2026