ID:12483 - Exploit for Information disclosure in Git for Windows - CVE-2025-66413

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output by the application. A remote attacker can trick a victim to clone from a malicious server, obtain a user's NTLM hash and brute-force the account name and password.

Remediation