CVE-2025-48384 PoC — Git 安全漏洞

来源

关联漏洞

Description

PoC dockerfile image for CVE-2025-48384

介绍

# vinieger-CVE-2025-48384-Dockerfile
This provised a PoC dockerfile image for CVE-2025-48384, related to https://github.com/vinieger/CVE-2025-48384, so it can be tested inside a Kubernetes cluster.

## Deploying it to GKE:


Building and Publishing to GCP registry:
> change `your registry path`
```
IMAGE="<your registry path>/alpine-cve-2025-48384:latest"

# Build and push
docker build -t $IMAGE .
docker push $IMAGE

# Check it's there
gcloud artifacts docker images list <your registry path>
```

save `alpine-cve-2025-48384-deployment.yaml`
> change `your registry path`
``` yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: alpine-cve-2025-48384
spec:
  replicas: 1
  selector:
    matchLabels:
      app: alpine-cve-2025-48384
  template:
    metadata:
      labels:
        app: alpine-cve-2025-48384
    spec:
      containers:
      - name: alpine-cve-2025-48384
        image: <your registry path>/alpine-cve-2025-48384:latest
```


Deploying to GKE:
```
kubectl apply -f alpine-cve-2025-48384-deployment.yaml
```

文件快照

 [4.0K]  /data/pocs/14fee874136d2e4c0e09d4644bff53c2acd0a39c
├── [ 706]  Dockerfile
└── [1.0K]  README.md

0 directories, 2 files

备注