Skip to content
OpenAdvisories
High WID-SEC-2026-1682 2 CVEs

Microsoft GitHub Enterprise: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Published May 26, 2026 · Updated May 26, 2026 · de-DE

Vendor: Microsoft Product: GitHub Enterprise

Summary

Ein Angreifer kann mehrere Schwachstellen in Microsoft GitHub Enterprise ausnutzen, um Informationen offenzulegen.

Product

GitHub ist ein netzbasierter Dienst zur Versionsverwaltung für Software-Entwicklungsprojekte.

Vulnerabilities 2

  • Critical 9.2
    CVE-2026-9312

    Server-Side Request Forgery vulnerability in GitHub Enterprise Server allowed access to internal services via path traversal in upload endpoint

    A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to send crafted requests to internal services by exploiting insufficient input validation in an upload endpoint. By injectin…

    GitHub Enterprise Server
  • High 7.0
    CVE-2026-8606

    Server-Side Request Forgery in GitHub Enterprise Server via Advisory Package URL Endpoint

    A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an attacker to cause the server to issue HTTP requests to internal services via the security advisories package lookup feature. By directing requests to…

    GitHub Enterprise Server

Revision history

  1. #1

    Initiale Fassung

References