PT-2025-41396
CVE-2025-10283
·
Published
2025-10-09
·
Updated
2026-06-29
Description by
CVSS 3.1
9.6
CriticalMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
BBOT (affected versions not specified)
Description
The gitdumper module in BBOT is susceptible to exploitation, allowing attackers to execute arbitrary commands on the host system. This occurs through the processing of malicious Git repositories. The module, designed to extract data from Git repositories, does not properly sanitize the
.git directory, leading to a path traversal condition and potential remote code execution.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾