Description
An attacker with access to a Management Console user account with the editor role could escalate privileges through a command injection vulnerability in the Management Console. This vulnerability affected all versions of GitHub Enterprise Server and was fixed in versions 3.11.3, 3.10.5, 3.9.8, and 3.8.13 This vulnerability was reported via the GitHub Bug Bounty program.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GitHub | Enterprise Server | 3.8.0 – ≤ 3.8.12, 3.9.0 – ≤ 3.9.7, 3.10.0 – ≤ 3.10.4, 3.11.0 – ≤ 3.11.2 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 1 repository
-
convisolabs/CVE-2024-0507_CVE-2024-0200-github ★ 1 · Mar 18, 2024
Exploits for GitHub Enterprise CVE-2024-0507 and CVE-2024-0200
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 1
- WID-SEC-2024-0128 Microsoft GitHub Enterprise: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 16, 2024
References
- https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.3
- https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.5
- https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.8
- https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.13