1 result · Clear filters · Feed
-
Medium 6.5
gix-fs before 0.24.1 NTLM Credential Disclosure via Windows Symlink UNC Probe
gix-fs in gitoxide before 0.24.1 contains a credential disclosure vulnerability that allows remote attackers to capture NTLM credentials by supplying UNC symlink targets in a crafted repository. When a victim checks out the repository on Windows with symlinks…