CVE-2018-17456

Published Oct 6, 2018·Updated Jun 16, 2026

NVD Description

Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing of a recursive "git clone" of a superproject if a .gitmodules file has a URL field beginning with a '-' character.

Public Exploits & PoCs5 found

PoC: CVE-2018-17456

CVE-2018-17456漏洞复现（PoC+Exp）

PoC: CVE-2018-17456

a test repository for CVE-2018-17456's PoC

PoC: CVE-2018-17456

This is a test repository for CVE-2018-17456

PoC: test

CVE-2018-17456复现

PoC: CVE-2018-17456

1-day

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free