Summary
Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Microsoft GitHub Enterprise ausnutzen, um Sicherheitsvorkehrungen zu umgehen, erweiterte Rechte zu erlangen und Daten zu ändern.
Product
GitHub ist ein netzbasierter Dienst zur Versionsverwaltung für Software-Entwicklungsprojekte.
Vulnerabilities 3
-
Critical 9.5
An XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when using SAML authentication w…
-
Medium 5.9
Incorrect Authorization allows read access to issues in GitHub Enterprise Server
An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed a GitHub App with only content: read and pull_request_write: write permissions to read issue content inside a private repository. This was only exploitable via us…
-
Medium 5.3
An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server, allowing an attacker to update the…
Revision history
-
#1
Initiale Fassung
References
-
Enterprise Server 3.10.16 Release Notes vom 2024-08-20
https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.16
-
Enterprise Server 3.11.14 Release Notes vom 2024-08-20
https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.14
-
Enterprise Server 3.12.8 Release Notes vom 2024-08-20
https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.12.8
-
Enterprise Server 3.13.3 Release Notes vom 2024-08-20
https://docs.github.com/en/enterprise-server@3.13/admin/release-notes#3.13.3