Summary
Ein Angreifer kann mehrere Schwachstellen in Microsoft GitHub Enterprise ausnutzen, um Daten zu manipulieren, und um beliebigen Programmcode auszuführen.
Product
GitHub ist ein netzbasierter Dienst zur Versionsverwaltung für Software-Entwicklungsprojekte.
Vulnerabilities 2
-
High 8.7
Server-Side Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed requests to attacker-controlled internal hosts
A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed a repository contributor to cause the appliance to issue requests to attacker-controlled internal hosts, which could be chained to achieve remote code e…
-
Medium 6.0
Missing authorization in GitHub Enterprise Server allowed repository writers to replace default branches via GraphQL
A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository collaborator with write access to delete the current default branch through the GraphQL API and cause an attacker-controlled branch to become the new de…
Revision history
-
#1
Initiale Fassung
References
-
GitHub Security Advisory GHSA-mj9w-xm4p-h2mp vom 2026-10-06
https://github.com/advisories/GHSA-mj9w-xm4p-h2mp
-
GitHub Security Advisory GHSA-JV57-8H35-3R6R vom 2026-10-06
https://github.com/advisories/GHSA-JV57-8H35-3R6R
-
GitHub Release Notes vom 2026-10-06
https://docs.github.com/en/enterprise-server@3.18/admin/release-notes#3.18.16
-
GitHub Release Notes vom 2026-10-06
https://docs.github.com/en/enterprise-server@3.19/admin/release-notes#3.19.13
-
GitHub Release Notes vom 2026-10-06
https://docs.github.com/en/enterprise-server@3.20/admin/release-notes#3.20.9
-
GitHub Release Notes vom 2026-10-06
https://docs.github.com/en/enterprise-server@3.21/admin/release-notes#3.21.7
-
GitHub Release Notes vom 2026-10-06
https://docs.github.com/en/enterprise-server@3.22/admin/release-notes#3.22.2