CVE-2025-10283 CRITICAL

CVE-2025-10283: Improper .git Sanitization in gitdumper Enables RCE

Vendor Blsops, Llc
Product bbot
Weakness CWE-22 · Path traversal
Published October 9, 2025
Last update October 9, 2025
View on NVD All CVEs

CVSS base score

9.6/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

BBOT's gitdumper module could be abused to execute commands through a malicious git repository.

Key dates

02Disclosure timeline

October 9, 2025 CVE published
October 9, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-7643 Attachment Manager <= 2.1.2 - Unauthenticated Arbitrary File Deletion CVE-2026-46491 SimpleSAMLphp casserver FileSystemTicketStore path traversal allows out-of-ticket-directory read/unserialize and conditional deletion CVE-2026-47932 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) CVE-2026-7036 Tenda i9 HTTP R7WebsSecurityHandlerfunction path traversal CVE-2023-35169 php-imap vulnerable to RCE through a directory traversal vulnerability