CVE-2024-52005

CVE-2024-52005 is a high-severity vulnerability in Git that allows malicious actors to manipulate terminal output during cloning, fetching, or pushing operations. By injecting ANSI escape sequences into "sideband channel" messages, an attacker can hide or misrepresent information, potentially misleading users into executing untrusted scripts. This vulnerability affects Git and has a CVSS score of 8.8, indicating a network-based attack with low complexity, requiring user interaction, and leading to high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion, but users are advised to update immediately or avoid recursive clones from untrusted sources.