Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-23040— Maliciously crafted remote URLs could lead to credential leak in GitHub Desktop

Quick assessment

Affected
desktop desktop
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

GitHub Desktop是GitHub Desktop开源的一个 GitHub 桌面版。 GitHub Desktop 3.4.12之前版本存在安全漏洞，该漏洞源于攻击者诱使用户直接或通过子模块克隆存储库，可允许攻击者通过使用恶意制作的远程URL访问用户的凭据。

CVSS 6.6 · Medium EPSS 0.76% · P53
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-23040

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Maliciously crafted remote URLs could lead to credential leak in GitHub Desktop
Source: CVE Program / CVE List V5
Vulnerability Description
GitHub Desktop is an open-source Electron-based GitHub app designed for git development. An attacker convincing a user to clone a repository directly or through a submodule can allow the attacker access to the user's credentials through the use of maliciously crafted remote URL. GitHub Desktop relies on Git to perform all network related operations (such as cloning, fetching, and pushing). When a user attempts to clone a repository GitHub Desktop will invoke `git clone` and when Git encounters a remote which requires authentication it will request the credentials for that remote host from GitHub Desktop using the git-credential protocol. Using a maliciously crafted URL it's possible to cause the credential request coming from Git to be misinterpreted by Github Desktop such that it will send credentials for a different host than the host that Git is currently communicating with thereby allowing for secret exfiltration. GitHub username and OAuth token, or credentials for other Git remote hosts stored in GitHub Desktop could be improperly transmitted to an unrelated host. Users should update to GitHub Desktop 3.4.12 or greater which fixes this vulnerability. Users who suspect they may be affected should revoke any relevant credentials.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
不充分的凭证保护机制
Source: CVE Program / CVE List V5
Vulnerability Title
GitHub Desktop 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
GitHub Desktop是GitHub Desktop开源的一个 GitHub 桌面版。 GitHub Desktop 3.4.12之前版本存在安全漏洞，该漏洞源于攻击者诱使用户直接或通过子模块克隆存储库，可允许攻击者通过使用恶意制作的远程URL访问用户的凭据。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
desktop desktop < 3.4.12 -

II. Public POCs for CVE-2025-23040

# POC Description Source Link Shenlong Link
1 None https://github.com/GabrieleDattile/CVE-2025-23040 POC Details
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-23040

请登录查看更多情报信息。

Vendor Advisories for CVE-2025-23040 (1)

Vendor Pages for CVE-2025-23040 (2)

IV. Related Vulnerabilities

Same product: desktop
Same vendor: desktop
Same weakness: CWE-522

V. Comments for CVE-2025-23040

No comments yet

Leave a comment