CVE-2018-11235

CVE-2018-11235 is a remote code execution vulnerability affecting Git versions before 2.17.1, including products from Canonical, Debian, and Red Hat. It allows a malicious project to execute arbitrary scripts on a user's machine when "git clone --recurse-submodules" is run, by crafting a .gitmodules file to exploit directory traversal and execute post-checkout hooks. The vulnerability has a high CVSS score of 7.8, indicating high impact on confidentiality, integrity, and availability, with low attack complexity requiring user interaction. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered significant community discussion and media coverage, suggesting awareness among security researchers.