Skip to content
OpenAdvisories
Medium WID-SEC-2026-2164 3 CVEs

Microsoft GitHub Enterprise Server: Mehrere Schwachstellen

Published Jun 30, 2026 · Updated Jun 30, 2026 · de-DE

Vendor: Microsoft Product: GitHub Enterprise

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Microsoft GitHub Enterprise Server ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen und vertrauliche Informationen offenzulegen.

Product

GitHub ist ein netzbasierter Dienst zur Versionsverwaltung für Software-Entwicklungsprojekte.

Vulnerabilities 3

  • Medium 6.3
    CVE-2026-10585

    Stored cross-site scripting vulnerability in GitHub Enterprise Server allowed arbitrary JavaScript execution via crafted Discussion titles in the Q&A category

    A stored cross-site scripting vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to execute arbitrary JavaScript in another user's browser by injecting a crafted payload into the title of a Discussion in the Q&A ca…

    GitHub Enterprise Server
  • Medium 6.0
    CVE-2026-9132

    Missing authorization vulnerability in GitHub Enterprise Server allowed disclosure of private repository contents via the Copilot pull request diff summary endpoint

    A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user to read source code from private repositories they did not have access to. The Copilot pull request description diff summary endpoint accepted …

    GitHub Enterprise Server
  • Medium 4.8
    CVE-2026-9106

    UI misrepresentation vulnerability in GitHub Enterprise Server allowed unauthorized organization runner management via undisclosed OAuth scope on consent screen

    A UI misrepresentation vulnerability was identified in GitHub Enterprise Server that allowed an OAuth application to gain unintended access to an organization's runner management. An attacker could exploit this by creating an OAuth application requesting the …

    GitHub Enterprise Server

Revision history

  1. #1

    Initiale Fassung

References