Summary
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Microsoft GitHub Enterprise Server ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.
Product
GitHub ist ein netzbasierter Dienst zur Versionsverwaltung für Software-Entwicklungsprojekte.
Vulnerabilities 1
-
High 8.4
Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise Server that allowed rendering of malicious HTML
An Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise Server that allowed attacker controlled HTML to be rendered by the Filter component (search) across GitHub that could be used to exfiltrate sensit…
Revision history
-
#1
Initiale Fassung
References
-
Enterprise Server 3.14.20 release notes vom 2026-01-06
https://docs.github.com/en/enterprise-server@3.14/admin/release-notes#3.14.20
-
Enterprise Server 3.15.15 release notes vom 2026-01-06
https://docs.github.com/en/enterprise-server@3.15/admin/release-notes#3.15.15
-
Enterprise Server 3.16.11 release notes vom 2026-01-06
https://docs.github.com/en/enterprise-server@3.16/admin/release-notes#3.16.11
-
Enterprise Server 3.17.8 release notes vom 2026-01-06
https://docs.github.com/en/enterprise-server@3.17/admin/release-notes#3.17.8
-
Enterprise Server 3.18.2 release notes vom 2026-01-06
https://docs.github.com/en/enterprise-server@3.18/admin/release-notes#3.18.2
-
Enterprise Server 3.19.1 release notes vom 2026-01-06
https://docs.github.com/en/enterprise-server@3.19/admin/release-notes#3.19.1
-
GitHub Security Advisory GHSA-9crm-342q-wg6v vom 2026-01-06
https://github.com/advisories/GHSA-9crm-342q-wg6v