CyberRota Analysis
AI-GeneratedGitPython versions prior to 3.1.54 are vulnerable due to an incomplete denylist in the unsafe_git_clone_options, which allows the use of the --template option. This oversight enables attackers to execute arbitrary commands by supplying a malicious directory containing harmful post-checkout hooks during clone operations. Organizations using GitPython should prioritize patching this vulnerability to mitigate the risk of remote code execution.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that omits --template, allowing attackers to achieve arbitrary command execution during clone operations. Attackers can supply --template pointing to a directory containing malicious post-checkout hooks that execute when git clones the repository.