Summary
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Microsoft GitHub Enterprise ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.
Product
GitHub ist ein netzbasierter Dienst zur Versionsverwaltung für Software-Entwicklungsprojekte.
Vulnerabilities 1
-
High 8.6
Insufficient HTML Sanitization Allows User-Controlled DOM Elements to Overwrite Server-Initialized Data Islands and Trigger Unintended Server-Side POST Requests
An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed user-supplied HTML to inject DOM elements with IDs that collided with server-initialized data islands. These collisions could overwrite or shadow critica…
Revision history
-
#1
Initiale Fassung
References
-
GitHub Enterprise Server Release Notes vom 2025-12-11
https://docs.github.com/en/enterprise-server@3.18/admin/release-notes#3.18.3
-
GitHub Enterprise Server Release Notes vom 2025-12-11
https://docs.github.com/en/enterprise-server@3.17/admin/release-notes#3.17.9
-
GitHub Enterprise Server Release Notes vom 2025-12-11
https://docs.github.com/en/enterprise-server@3.16/admin/release-notes#3.16.12
-
GitHub Enterprise Server Release Notes vom 2025-12-11
https://docs.github.com/en/enterprise-server@3.15/admin/release-notes#3.15.16
-
GitHub Enterprise Server Release Notes vom 2025-12-11
https://docs.github.com/en/enterprise-server@3.14/admin/release-notes#3.14.21
-
NIST Vulnerability Database vom 2025-12-11
https://nvd.nist.gov/vuln/detail/CVE-2025-14046