CVE-2024-32004
HIGHGit <2.45.1 - Remote Code Execution via Crafted Repository Clone
Title source: manualExploitation Summary
EIP tracks 2 public exploits for CVE-2024-32004. PoCs published by 10cks, Wadewfsssss.
AI-analyzed exploit summary This PoC demonstrates CVE-2024-32004, a Git vulnerability where malicious hooks in a repository can execute arbitrary commands during clone operations. The scripts create a malicious repository with a hook that launches calculators (calc.exe/gnome-calculator) when cloned.
Description
Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, an attacker can prepare a local repository in such a way that, when cloned, will execute arbitrary code during the operation. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. As a workaround, avoid cloning repositories from untrusted sources.
Exploits (2)
This PoC demonstrates CVE-2024-32004, a Git vulnerability where malicious hooks in a repository can execute arbitrary commands during clone operations. The scripts create a malicious repository with a hook that launches calculators (calc.exe/gnome-calculator) when cloned.
This PoC exploits a Git vulnerability (CVE-2024-32004) by manipulating Git configuration to execute arbitrary code via a malicious upload-pack script during a `git pull` operation. The attack leverages Git's filter mechanisms and remote configuration to achieve remote code execution.
References (7)
Scores
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H