Back to the CVE list
CVE-2024-10220

Arbitrary command execution through gitRepo volume

CVSS score

8.1

EPSS probability

%3.0

Risk score

0.2

Published

1 y ago

OverviewPublic Exploits (6)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
mochizuki875/CVE-2024-10220-githooks
GitHub

CVE-2024-10220 Test repo (★1)

Public PoCSource updated: 21.11.2024 17:25:57
G
XiaomingX/cve-2024-10220-githooks
GitHub

CVE-2024-10220 Test repo (★0)

Public PoCSource updated: 01.12.2024 14:18:42
G
candranapits/poc-CVE-2024-10220
GitHub

CVE-2024-10220 POC (★0)

Public PoCSource updated: 17.12.2024 17:22:35
G
mrk336/CVE-2024-10220-Kubernetes-gitRepo-Volume-Vulnerability
GitHub

CVE-2024-10220 reveals a critical flaw in Kubernetes’ deprecated gitRepo volume type, allowing attackers to execute arbitrary commands via malicious .hooks scripts. The article explains how this breaks container isolation and offers exploit code, automation examples, and mitigation guidance (★0)

Public PoCSource updated: 10.09.2025 12:35:29
G
imohammed28/cve-2024-10220-test
GitHub

Testing CVE-2024-10220 for HPC security research (★0)

Public PoCSource updated: 01.12.2025 07:05:44
G
nhu2222555-beep/CVE-2024-10220-githooks
GitHub

CVE-2024-10220 test (★0)

Public PoCSource updated: 21.09.2026 15:09:49

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-10220"