Threats tagged 'brew-git-cve-2024-32002'

Git versions prior to 2.45.1 contain a vulnerability in recursive clones on case-insensitive filesystems with symlink support enabled. Crafted repositories with submodules can exploit a bug causing Git to write files into the .git/ directory instead of the submodule worktree. This allows an attacker to write and execute malicious hooks during the clone operation without user inspection. The issue is patched in version 2.45.1 and later. Disabling symbolic link support in Git prevents this attack.