← CVE Intelligence

CVE-2025-10281

Insecure URL Handling in git_clone Leading to Leaked API Key PUBLISHED

Description (CNA)

BBOT's git_clone module could be abused to disclose a GitHub API key to an attacker controlled server with a malicious formatted git URL.

Affected (CNA)

Vendor / productVersions
BLSOPS, LLC / bbotaffected 0.0.0 through 2.6.1

CWE

CWE-200

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.