CVE-2025-54583CWE-863

GitProxy bypasses approvals when pushing multiple branches

High · published July 30, 2025

CVSS v4.0
8.3
EPSS
0%
Percentile
41.4
In the wild
Unconfirmed
What it is

GitProxy is an application that stands between developers and a Git remote endpoint (e.g., github.com). Versions 1.19.1 and below allow users to push to remote repositories while bypassing policies and explicit approvals. Since checks and plugins are skipped, code containing secrets or unwanted changes could be pushed into a repository. This is fixed in version 1.19.2.

The record
Technical detail
CVSS v4.0
8.3 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N
EPSS
0.00492 · 41.4th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2025-07-30T19:59Z
EPSS history
Timeline
  • 30 JUL 19:59Z
    GitProxy bypasses approvals when pushing multiple branches
    cvelistv5