PT-2025-41396

CVE-2025-10283

·

Published

2025-10-09

·

Updated

2026-06-29

Description by

CVSS 3.1
9.6
Critical
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions BBOT (affected versions not specified)
Description The gitdumper module in BBOT is susceptible to exploitation, allowing attackers to execute arbitrary commands on the host system. This occurs through the processing of malicious Git repositories. The module, designed to extract data from Git repositories, does not properly sanitize the .git directory, leading to a path traversal condition and potential remote code execution.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
GHSA-H6M2-R6H9-4C44
PYSEC-2026-293
Found an issue in the description? Have something to add? Feel free to write us 👾