Skip to content
OpenAdvisories
High WID-SEC-2026-2418 3 CVEs

Microsoft GitHub Enterprise Server: Mehrere Schwachstellen

Published Jul 19, 2026 · Updated Jul 19, 2026 · de-DE

Vendor: Microsoft Product: GitHub Enterprise

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Microsoft GitHub Enterprise Server ausnutzen, um einen Denial of Service Angriff durchzuführen, Daten zu manipulieren, Code auszuführen und Informationen offenzulegen.

Product

GitHub ist ein netzbasierter Dienst zur Versionsverwaltung für Software-Entwicklungsprojekte.

Vulnerabilities 3

  • High 8.6
    CVE-2026-15343

    Path traversal vulnerability in GitHub Enterprise Server allowed writing files to arbitrary repository paths, including GitHub Actions workflow files, via unchecked Dependabot dependency-file paths

    A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an attacker with code execution inside a Dependabot updater container to write files to arbitrary repository paths, including GitHub Actions workflow files under .github/wo…

    GitHub Enterprise Server
  • Medium 5.7
    CVE-2026-15007

    Denial of service vulnerability in GitHub Enterprise Server allowed service disruption via deeply nested YAML in release notes configuration

    A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user to cause service disruption by supplying a repository release notes configuration file containing deeply nested YAML. When release notes were gener…

    GitHub Enterprise Server
  • Medium 5.3
    CVE-2026-15783

    Missing Authorization vulnerability was identified in GitHub Enterprise Server that allowed reading private repository metadata via delegated bypass rule suites

    A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user with write access to any repository to read metadata from private repositories they did not have access to, including private repository owners…

    GitHub Enterprise Server

Revision history

  1. #1

    Initiale Fassung

References