TLDR InfoSec · STRATEGIES & TACTICS

CLONE2LEAK: YOUR GIT CREDENTIALS BELONG TO US

flatt.tech11 min read

Summary from the TLDR InfoSec newsletter

A security engineer investigating GitHub Desktop discovered a vulnerability in Git's Credential Protocol that could leak user credentials. Further research revealed similar bugs across multiple Git-related projects, stemming from improper message handling in credential helper implementations.