Description
An unsafe reflection vulnerability was identified in GitHub Enterprise Server that could lead to reflection injection. This vulnerability could lead to the execution of user-controlled methods and remote code execution. To exploit this bug, an actor would need to be logged into an account on the GHES instance with the organization owner role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12 and was fixed in versions 3.8.13, 3.9.8, 3.10.5, and 3.11.3. This vulnerability was reported via the GitHub Bug Bounty program.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GitHub | Enterprise Server | 3.8.0 – < 3.8.13, 3.9.0 – < 3.9.8, 3.10.0 – < 3.10.5, 3.11.0 – < 3.11.3 | 3.8.13 |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Github Enterprise - Remote Code Execution http/cves/2024/CVE-2024-0200.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Advisories 1
- WID-SEC-2024-0128 Microsoft GitHub Enterprise: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 16, 2024
References
- https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.13
- https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.8
- https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.5
- https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.3