Advisories · Technology
GitHub Enterprise Server.
Every CVE that names GitHub Enterprise Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Out-of-bounds read vulnerability in GitHub Enterprise Server allowed disclosure of process memory in the Git service
- GitHub Enterprise Server
- Memory corruption
- CVSS 5.3 Medium
Cross-site request forgery vulnerability in GitHub Enterprise Server allowed deletion of stored ChatOps configuration through the Management Console
- GitHub Enterprise Server
- Cross-site request forgery (CSRF)
- CVSS 7.7 High
Use-after-free vulnerability in GitHub Enterprise Server allowed remote code execution in the Git service
- GitHub Enterprise Server
- Memory corruption
- CWE-1265
- CVSS 8.7 High
Server-Side Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed requests to attacker-controlled internal hosts
- GitHub Enterprise Server
- Server-side request forgery (SSRF)
- CVSS 6.0 Medium
Missing authorization in GitHub Enterprise Server allowed repository writers to replace default branches via GraphQL
- GitHub Enterprise Server
- Broken access control
- CVSS 6.0 Medium
Authorization bypass vulnerability in GitHub Enterprise Server allowed reading of private pull request diffs and patches via repository name collision
- GitHub Enterprise Server
- Broken access control
- CVSS 7.4 High
Stored cross-site scripting vulnerability in GitHub Enterprise Server allowed HTML attribute injection via the Markdown rendering pipeline
- GitHub Enterprise Server
- Cross-site scripting (XSS)
- CVSS 9.3 CriticalCritical · CVSS 9+
GitHub Enterprise Server notebook viewer vulnerable to Server-side request forgery
- GitHub Enterprise Server
- Server-side request forgery (SSRF)
- CWE-208
- CVSS 7.7 High
Server-Side Request Forgery vulnerability in GitHub Enterprise Server allowed remote code execution via network access from pre-receive hooks to internal services
- GitHub Enterprise Server
- Server-side request forgery (SSRF)
- CVSS 7.7 High
Race condition vulnerability was identified in GitHub Enterprise Server that allowed remote code execution
- GitHub Enterprise Server
- Race condition
- CVSS 8.2 High
Server-side request forgery vulnerability in GitHub Enterprise Server Manage API leaked a replayable gateway-agent bearer token
- GitHub Enterprise Server
- Server-side request forgery (SSRF)
- CVSS 6.6 Medium
Denial of service vulnerability in GitHub Enterprise Server allowed unauthenticated service disruption via deeply nested request parameters
- GitHub Enterprise Server
- Denial of service
- CVSS 8.8 High
Path traversal in GitHub Enterprise Server allowed unauthenticated deletion of instance storage via the X-GitHub-Request-Id header
- GitHub Enterprise Server
- Path traversal
- CVSS 5.3 Medium
Missing Authorization vulnerability was identified in GitHub Enterprise Server that allowed reading private repository metadata via delegated bypass rule suites
- GitHub Enterprise Server
- Broken access control
- CVSS 8.6 High
Path traversal vulnerability in GitHub Enterprise Server allowed writing files to arbitrary repository paths, including GitHub Actions workflow files, via unchecked Dependabot dependency-file paths
- GitHub Enterprise Server
- Path traversal
- CVSS 5.7 Medium
Denial of service vulnerability in GitHub Enterprise Server allowed service disruption via deeply nested YAML in release notes configuration
- GitHub Enterprise Server
- Denial of service
- CVSS 5.3 Medium
An incorrect authorization vulnerability in GitHub Enterprise Server allows issue creation in unrelated public repositories
- GitHub Enterprise Server
- Broken access control
- CVSS 6.3 Medium
Stored cross-site scripting vulnerability in GitHub Enterprise Server allowed arbitrary JavaScript execution via crafted Discussion titles in the Q&A category
- GitHub Enterprise Server
- Cross-site scripting (XSS)
- CVSS 6.0 Medium
Missing authorization vulnerability in GitHub Enterprise Server allowed disclosure of private repository contents via the Copilot pull request diff summary endpoint
- GitHub Enterprise Server
- Broken access control
- CVSS 4.8 Medium
UI misrepresentation vulnerability in GitHub Enterprise Server allowed unauthorized organization runner management via undisclosed OAuth scope on consent screen
- GitHub Enterprise Server
- CWE-451
- CVSS 9.2 CriticalCritical · CVSS 9+
Server-Side Request Forgery vulnerability in GitHub Enterprise Server allowed access to internal services via path traversal in upload endpoint
- GitHub Enterprise Server
- Server-side request forgery (SSRF)
- CVSS 7.0 High
Server-Side Request Forgery in GitHub Enterprise Server via Advisory Package URL Endpoint
- GitHub Enterprise Server
- Server-side request forgery (SSRF)
- CVSS 5.9 Medium
Reflected HTML injection vulnerability in GitHub Enterprise Server Management Console login page allowed credential theft
- GitHub Enterprise Server
- Cross-site scripting (XSS)
- CVSS 7.9 High
Server-side request forgery vulnerability in GitHub Enterprise Server notebook viewer via URL parser confusion
- GitHub Enterprise Server
- Server-side request forgery (SSRF)
- CWE-436
- CVSS 6.3 Medium
Denial of service vulnerability in GitHub Enterprise Server allowed service disruption via unauthenticated API endpoint
- GitHub Enterprise Server
- Denial of service
- CVSS 6.3 Medium
Authentication bypass vulnerability in GitHub Enterprise Server allowed creation of local user accounts bypassing the configured external identity provider
- GitHub Enterprise Server
- Authentication bypass
- CVSS 7.2 High
Improper authorization fallback allows scoped user-to-server token installation escape in GitHub Enterprise Server
- GitHub Enterprise Server
- Broken access control
- CVSS 5.3 Medium
Authorization bypass in GitHub Enterprise Server secret scanning push protection allows cross-repository modification of delegated bypass reviewers
- GitHub Enterprise Server
- Broken access control
- CVSS 5.3 Medium
Improper authorization vulnerability in GitHub Enterprise Server allowed disclosure of private repository names via mobile upload policy API
- GitHub Enterprise Server
- Information disclosure
- CVSS 7.5 High
Incorrect Regular Expression vulnerability in GitHub Enterprise Server allowed unauthorized access to user accounts via OAuth callback URL validation bypass
- GitHub Enterprise Server
- CWE-185
- CVSS 8.9 High
Server-Side Request Forgery in GitHub Enterprise Server allowed extraction of sensitive environment variables via timing side-channel attack
- GitHub Enterprise Server
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
Incorrect Authorization in GitHub Enterprise Server allows access to issue and commit search results without repo scope
- GitHub Enterprise Server
- Broken access control
- CVSS 7.4 High
Improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed cross-site scripting via task list content and enabled arbitrary HTML injection
- GitHub Enterprise Server
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Improper authorization in GitHub Projects allows modification of issue and pull request metadata without repository write access
- GitHub Enterprise Server
- Broken access control
- CVSS 8.7 HighCritical · CVSS 7+ and EPSS
Remote code execution via git push option injection in GitHub Enterprise Server
- GitHub Enterprise Server
- Command injection
- CVSS 7.1 High
Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed unauthorized merging of pull requests
- GitHub Enterprise Server
- Broken access control
- CVSS 6.0 Medium
Missing Authorization Check in GitHub Enterprise Server Allows Unauthorized Uploads to Repository Migration Exports
- GitHub Enterprise Server
- Broken access control
- CVSS 7.6 High
Improper Handling of HTTP Redirects vulnerability was identified in GitHub Enterprise Server that allowed leaking of authorization token and enabled remote code execution
- GitHub Enterprise Server
- Open redirect
- CVSS 8.4 High
Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise Server that allowed rendering of malicious HTML
- GitHub Enterprise Server
- Cross-site scripting (XSS)
- CVSS 8.6 High
Insufficient HTML Sanitization Allows User-Controlled DOM Elements to Overwrite Server-Initialized Data Islands and Trigger Unintended Server-Side POST Requests
- GitHub Enterprise Server
- Cross-site scripting (XSS)
- CVSS 7.5 High
Pre-Receive Hook Path Collision Vulnerability in GitHub Enterprise Server Allowing Privilege Escalation
- GitHub Enterprise Server
- Path traversal
- CVSS 8.6 High
DOM-based Cross-Site Scripting was identified in GitHub Enterprise Server Issues search allows privilege escalation and unauthorized workflow triggers
- GitHub Enterprise Server
- Cross-site scripting (XSS)
- CVSS 7.0 High
Incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed read-only access
- GitHub Enterprise Server
- Broken access control
- CVSS 5.3 Medium
Incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed unauthorized read-only access
- GitHub Enterprise Server
- Broken access control
- CVSS 6.3 Medium
GitHub Enterprise Server Information Disclosure Vulnerability Exposes Private Repository Names via Search API
- GitHub Enterprise Server
- Information disclosure
- CVSS 8.6 High
Markdown math block sanitization bypass allows privilege escalation and unauthorized workflow triggers
- GitHub Enterprise Server
- Cross-site scripting (XSS)
- CVSS 7.1 High
Pre-Receive Hook Remote Code Execution vulnerability was identified in GitHub Enterprise Server that allowing Privilege Escalation
- GitHub Enterprise Server
- Code injection
- CVSS 5.3 Medium
Missing Authorization vulnerability was identified in GitHub Enterprise Server that allowed unauthorized access to private repository names
- GitHub Enterprise Server
- Broken access control
- CVSS 7.1 High
Code Injection Vulnerability in GitHub Enterprise Server Allows Arbitrary Code Execution via Message Handling
- GitHub Enterprise Server
- Code injection
- CVSS 7.6 High
Improper Verification of Cryptographic Signature in GitHub Enterprise Server Allows Signature Spoofing by Improper Validation
- GitHub Enterprise Server
- Weak cryptography or TLS
- CVSS 8.7 High
Privilege Management vulnerability was identified in GitHub Enterprise Server that allowed GitHub Apps to grant themselves write access
- GitHub Enterprise Server
- Privilege escalation
- CVSS 6.0 Medium
Authorization Bypass Vulnerability was Identified in GitHub Enterprise Server that Allowed Unauthorized Internal Users to Access Secret Scanning Alert Data
- GitHub Enterprise Server
- Broken access control
- CVSS 8.7 High
Pre-Receive Hook Path Collision Vulnerability in GitHub Enterprise Server Allowing Privilege Escalation
- GitHub Enterprise Server
- Path traversal
- CVSS 5.7 Medium
Information disclosure in GitHub Enterprise Server
- GitHub Enterprise Server
- Information disclosure
- CVSS 9.5 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
An Improper Verification of Cryptographic Signature vulnerability was identified in GitHub Enterprise Server that allowed SAML SSO authentication to be bypassed when the encrypted assertions feature…
- GitHub Enterprise Server
- Weak cryptography or TLS
- CVSS 6.2 Medium
Improper privilege management in GitHub Enterprise Server
- GitHub Enterprise Server
- Privilege escalation
- CVSS 5.8 Medium
Cross-site scripting in GitHub Enterprise Server
- GitHub Enterprise Server
- Cross-site scripting (XSS)
- CVSS 9.5 CriticalCritical · CVSS 9+
Improper signature verification in GitHub Enterprise Server
- GitHub Enterprise Server
- Weak cryptography or TLS
- CVSS 5.9 Medium
Incorrect Authorization allows read access to issues in GitHub Enterprise Server
- GitHub Enterprise Server
- Broken access control
- CVSS 5.3 Medium
Incorrect authorization in GitHub Enterprise Server
- GitHub Enterprise Server
- Broken access control