CyberRota Analysis
AI-GeneratedGitoxide versions prior to 0.38.2 are vulnerable due to insufficient validation of carriage return characters in URLs used by credential helpers. This flaw allows attackers to manipulate the credential retrieval process, potentially exposing sensitive credentials for arbitrary hosts. Organizations using affected versions should prioritize patching to mitigate the risk of credential leakage.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
gitoxide before 0.38.2 fails to validate carriage return characters in URL values passed to credential helpers. Attackers can supply URLs containing bare carriage returns to inject additional helper protocol fields and cause credential helpers to return credentials for attacker-specified hosts instead of the requested URL.