Threats tagged 'ghsa-87g4-4rpp-w3f6'

A credential disclosure vulnerability exists in gix-fs component of gitoxide before version 0.24.1. Remote attackers can exploit this by supplying UNC symlink targets in a crafted repository. When a user checks out this repository on Windows with symlinks enabled, the vulnerability causes SMB authentication to leak NTLM credentials including username, domain, and NTLMv2 hash.