GitHub Enterprise Server Pre-Receive Hook Vulnerability (CVE-2025-3509): Technical Breakdown
Introduction
Recently, GitHub confirmed and patched a critical remote code execution (RCE) vulnerability in GitHub Enterprise Server, identified as CVE-2025-3509. This vulnerability stems from an