CVE-2025-66413
ADVISORY - nistSummary
Git for Windows is the Windows port of Git. Prior to 2.53.0(2), it is possible to obtain a user's NTLM hash by tricking them into cloning from a malicious server. Since NTLM hashing is weak, it is possible for the attacker to brute-force the user's account name and password. This vulnerability is fixed in 2.53.0(2).
EPSS Score: 0.00268 (0.190)
Common Weakness Enumeration (CWE)
Alpine
CREATED
UPDATED
ADVISORY IDCVE-2025-66413
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
| Package | Type | OS Name | OS Version | Affected Ranges | Fix Versions |
|---|---|---|---|---|---|
| alpine/git | apk | alpine | 3.23 | <=2.52.0-r0 | Not yet available |
| alpine/git | apk | alpine | 3.20 | <=2.14.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.20 | <=2.17.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.20 | <=2.19.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.20 | <=2.24.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.20 | <=2.26.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.20 | <=2.26.2-r0 | Not yet available |
| alpine/git | apk | alpine | 3.20 | <=2.30.2-r0 | Not yet available |
| alpine/git | apk | alpine | 3.20 | <=2.35.2-r0 | Not yet available |
| alpine/git | apk | alpine | 3.20 | <=2.37.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.20 | <=2.38.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.20 | <=2.39.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.20 | <=2.39.2-r0 | Not yet available |
| alpine/git | apk | alpine | 3.20 | <=2.40.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.20 | <=2.45.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.20 | <=2.45.2-r0 | Not yet available |
| alpine/git | apk | alpine | 3.20 | <=2.45.3-r0 | Not yet available |
| alpine/git | apk | alpine | 3.20 | <=2.45.4-r0 | Not yet available |
| alpine/git | apk | alpine | 3.21 | <=2.14.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.21 | <=2.17.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.21 | <=2.19.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.21 | <=2.24.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.21 | <=2.26.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.21 | <=2.26.2-r0 | Not yet available |
| alpine/git | apk | alpine | 3.21 | <=2.30.2-r0 | Not yet available |
| alpine/git | apk | alpine | 3.21 | <=2.35.2-r0 | Not yet available |
| alpine/git | apk | alpine | 3.21 | <=2.37.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.21 | <=2.38.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.21 | <=2.39.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.21 | <=2.39.2-r0 | Not yet available |
| alpine/git | apk | alpine | 3.21 | <=2.40.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.21 | <=2.45.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.21 | <=2.47.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.21 | <=2.47.2-r0 | Not yet available |
| alpine/git | apk | alpine | 3.21 | <=2.47.3-r0 | Not yet available |
| alpine/git | apk | alpine | 3.22 | <=2.14.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.22 | <=2.17.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.22 | <=2.19.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.22 | <=2.24.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.22 | <=2.26.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.22 | <=2.26.2-r0 | Not yet available |
| alpine/git | apk | alpine | 3.22 | <=2.30.2-r0 | Not yet available |
| alpine/git | apk | alpine | 3.22 | <=2.35.2-r0 | Not yet available |
| alpine/git | apk | alpine | 3.22 | <=2.37.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.22 | <=2.38.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.22 | <=2.39.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.22 | <=2.39.2-r0 | Not yet available |
| alpine/git | apk | alpine | 3.22 | <=2.40.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.22 | <=2.45.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.22 | <=2.48.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.22 | <=2.49.0-r0 | Not yet available |
| alpine/git | apk | alpine | 3.22 | <=2.49.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.19 | <=2.14.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.19 | <=2.17.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.19 | <=2.19.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.19 | <=2.24.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.19 | <=2.26.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.19 | <=2.26.2-r0 | Not yet available |
| alpine/git | apk | alpine | 3.19 | <=2.30.2-r0 | Not yet available |
| alpine/git | apk | alpine | 3.19 | <=2.35.2-r0 | Not yet available |
| alpine/git | apk | alpine | 3.19 | <=2.37.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.19 | <=2.38.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.19 | <=2.39.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.19 | <=2.39.2-r0 | Not yet available |
| alpine/git | apk | alpine | 3.19 | <=2.40.1-r0 | Not yet available |
| alpine/git | apk | alpine | 3.19 | <=2.43.4-r0 | Not yet available |
| alpine/git | apk | alpine | 3.19 | <=2.43.5-r0 | Not yet available |
| alpine/git | apk | alpine | 3.19 | <=2.43.6-r0 | Not yet available |
| alpine/git | apk | alpine | 3.19 | <=2.43.7-r0 | Not yet available |
Severity and metrics
No CVSS data available from this advisory.
NIST
CVSS SCORE
7.4highPhoton
CREATED
UPDATED
ADVISORY ID
CVE-2025-66413
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-