-
Potential Git CVE-2025-48384 Exploitation
Sep 19, 2026 · Domain: Endpoint OS: Linux OS: macOS Use Case: Threat Detection Tactic: Execution Data Source: Elastic Defend Data Source: Auditd Manager Data Source: SentinelOne Data Source: Crowdstrike Resources: Investigation Guide Noise: Low Performance: Normal Profile: Recommended Threat: Vulnerability Exploit Rule Type: Event Correlation (EQL) Platform: Linux Platform: macOS Vuln: CVE-2025-48384 ·This rule detects potential exploitation of CVE-2025-48384 via Git. This vulnerability allows attackers to execute arbitrary code by leveraging Git's recursive clone feature to fetch and execute malicious scripts from a remote repository.
Read More