{"uuid": "f3fcd539-1686-4c49-ac8f-feac92906def", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-32002", "type": "seen", "source": "https://t.me/sysadm_in_up/2146", "content": "Git CVE-2024-32002 - This allows writing a hook that will be executed while the clone operation is still running, giving the user no opportunity to inspect the code that is being executed\n \nGot vesrsions: 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, 2.39.4\n \ngit config --global core.symlinks false can be disable this attack vector\n\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-32002\n\nPoC: https://github.com/szybnev/git_rce/blob/main/create_poc.sh\n\nP.S. Thx Tatyana for the reporting \u270c\ufe0f", "creation_timestamp": "2026-07-30T00:03:03.349859Z"}