
This proof-of-concept demonstrates Git's CR-path submodule misparsing vulnerability, leading to arbitrary hook execution during git clone --recurse-submodules.
This is for educational and testing purposes only. Do not run this on any production environment.
git clone https://github.com/yourname/cve-2025-48384-poc.git
cd cve-2025-48384
chmod +x generate_poc.sh
./generate_poc.sh
cd mainrepo
git clone --recurse-submodules . ../triggered
“教育用途”、“自担风险”、“禁用于非法用途”