curl · Report #2915426
Git repository found
N/Astatus
highseverity
10upvotes
7 Jul 2025disclosed
How it was found
Summary:
Hello team , When i research I found domain vuln to downliad git repository and i will explain that.
Steps To Reproduce:
- Add DotGit extention on your browser
- Now try to access to that domain https://curl.dev/
- You will show that extention is alert and can download that bucket.
Impact
Summary:
The exposure of the /.git directory can lead to unauthorized access to sensitive information, such as source code, configuration files, and potentially secrets or credentials stored in the repository.