Summary
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Microsoft GitHub Enterprise ausnutzen, um falsche Informationen darzustellen.
Product
GitHub ist ein netzbasierter Dienst zur Versionsverwaltung für Software-Entwicklungsprojekte.
Vulnerabilities 1
-
Medium 4.5
Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling
An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff in a re-opened Pull Request. To do so, an attacker would need write access to the repository. This vulnerability aff…
Revision history
-
#1
Initiale Fassung
References
-
NIST Database vom 2023-09-24
https://nvd.nist.gov/vuln/detail/CVE-2023-23766
-
Github Enterpreise Server Release Notes vom 2023-09-24
https://docs.github.com/enterprise-server@3.9/admin/release-notes#3.9.3
-
Github Enterpreise Server Release Notes vom 2023-09-24
https://docs.github.com/enterprise-server@3.8/admin/release-notes#3.8.8
-
Github Enterpreise Server Release Notes vom 2023-09-24
https://docs.github.com/enterprise-server@3.7/admin/release-notes#3.7.15
-
Github Enterpreise Server Release Notes vom 2023-09-24
https://docs.github.com/enterprise-server@3.6/admin/release-notes#3.6.17
-
Github Enterpreise Server Release Notes vom 2023-09-24
https://docs.github.com/de/enterprise-server@3.10/admin/release-notes