CVE-2017-1000117PoC(git-scm / git)

LOWCVSS 8.8 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Prioritize remediation for git-scm git systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed. Such a URL could be placed in the .gitmodules file of a malicious project, and an unsuspecting victim could be tricked into running "git clone --recurse-submodules" to trigger the vulnerability.

3.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-601

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • git

Threat summary

  • Public PoC and exploit tooling are both present
  • 1 mentions across 1 observed day

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
Products
git

28 versions affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-04-28: 1PoC Mentioned / Linked · 2026-04-28: 1Exploit Tool / Code · 2026-04-28: 104-28
Signal classification1 categories
PoC
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • kanata📖技書博13(縦書きTypst、OSINT探偵)@kanata201612
    PoC

    懐かしのうんこもりもり #ご参考 GitHub - greymd/CVE-2017-1000117: Check Git's vulnerability CVE-2017-1000117 · GitHub https://github.com/greymd/CVE-2017-1000117

    Post summary

    The post references a GitHub repository that likely hosts a proof‑of‑concept or exploit for CVE‑2017‑1000117, but offers no additional context on active exploitation, patches, or technical details.

    02040421
    1.6K followersView on X
CPE platform detail51 entries

51 of 51 entries

PartVendorProductVersionTarget SWTarget HW
Appgit-scmgit---
Appgit-scmgit2.10.0--
Appgit-scmgit2.10.0--
Appgit-scmgit2.10.0--
Appgit-scmgit2.10.0--
Appgit-scmgit2.10.1--
Appgit-scmgit2.10.2--
Appgit-scmgit2.10.3--
Appgit-scmgit2.11.0--
Appgit-scmgit2.11.0--
Appgit-scmgit2.11.0--
Appgit-scmgit2.11.0--
Appgit-scmgit2.11.0--
Appgit-scmgit2.11.1--
Appgit-scmgit2.11.2--
Appgit-scmgit2.12.0--
Appgit-scmgit2.12.0--
Appgit-scmgit2.12.0--
Appgit-scmgit2.12.0--
Appgit-scmgit2.12.1--
Appgit-scmgit2.12.2--
Appgit-scmgit2.12.3--
Appgit-scmgit2.13.0--
Appgit-scmgit2.13.0--
Appgit-scmgit2.13.0--
Appgit-scmgit2.13.0--
Appgit-scmgit2.13.1--
Appgit-scmgit2.13.2--
Appgit-scmgit2.13.3--
Appgit-scmgit2.13.4--
Appgit-scmgit2.14.0--
Appgit-scmgit2.14.0--
Appgit-scmgit2.14.0--
Appgit-scmgit2.8.0--
Appgit-scmgit2.8.0--
Appgit-scmgit2.8.0--
Appgit-scmgit2.8.0--
Appgit-scmgit2.8.0--
Appgit-scmgit2.8.1--
Appgit-scmgit2.8.2--
Appgit-scmgit2.8.3--
Appgit-scmgit2.8.4--
Appgit-scmgit2.8.5--
Appgit-scmgit2.9.0--
Appgit-scmgit2.9.0--
Appgit-scmgit2.9.0--
Appgit-scmgit2.9.0--
Appgit-scmgit2.9.1--
Appgit-scmgit2.9.2--
Appgit-scmgit2.9.3--
Appgit-scmgit2.9.4--

Explore more