Summary
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Microsoft GitHub Enterprise ausnutzen, um Dateien zu manipulieren.
Product
GitHub ist ein netzbasierter Dienst zur Versionsverwaltung für Software-Entwicklungsprojekte.
Vulnerabilities 1
-
High 8.8
Path traversal in GitHub Enterprise Server allowed unauthenticated deletion of instance storage via the X-GitHub-Request-Id header
A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete arbitrary files and directories on the instance, including the entire user storage directory containing Git LFS objects, release asset…
Revision history
-
#1
Initiale Fassung
References
-
CVERecord vom 2026-08-05
https://www.cve.org/CVERecord?id=CVE-2026-17556
-
GitHub Enterprise Server release notes vom 2026-08-05
https://docs.github.com/en/enterprise-server@3.17/admin/release-notes#3.17.19
-
GitHub Enterprise Server release notes vom 2026-08-05
https://docs.github.com/en/enterprise-server@3.18/admin/release-notes#3.18.13
-
GitHub Enterprise Server release notes vom 2026-08-05
https://docs.github.com/en/enterprise-server@3.19/admin/release-notes#3.19.10
-
GitHub Enterprise Server release notes vom 2026-08-05
https://docs.github.com/en/enterprise-server@3.20/admin/release-notes#3.20.6
-
GitHub Enterprise Server release notes vom 2026-08-05
https://docs.github.com/en/enterprise-server@3.21/admin/release-notes#3.21.4