Summary
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Microsoft GitHub Enterprise ausnutzen, um Informationen offenzulegen und um Sicherheitsmechanismen zu umgehen.
Product
GitHub ist ein netzbasierter Dienst zur Versionsverwaltung für Software-Entwicklungsprojekte.
Vulnerabilities 1
-
High 7.0
Incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed read-only access
An improper access control vulnerability was identified in GitHub Enterprise Server that allowed users with access to any repository to retrieve limited code content from another repository by creating a diff between the repositories. To exploit this vulnerab…
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2025-25823
-
#1
Initiale Fassung
References
-
GitHub Enterprise Server Release Notes 3.17.5 vom 2025-08-25
https://docs.github.com/en/enterprise-server@3.17/admin/release-notes#3.17.5
-
GitHub Enterprise Server Release Notes 3.16.8 vom 2025-08-25
https://docs.github.com/en/enterprise-server@3.16/admin/release-notes#3.16.8
-
GitHub Enterprise Server Release Notes 3.15.12 vom 2025-08-25
https://docs.github.com/en/enterprise-server@3.15/admin/release-notes#3.15.12
-
GitHub Enterprise Server Release Notes 3.14.17 vom 2025-08-25
https://docs.github.com/en/enterprise-server@3.14/admin/release-notes#3.14.17