GitHub Enterprise Server.

GitHub Enterprise Server Information Disclosure Vulnerability Exposes Private Repository Names via Deploy Keys

• GitHub Enterprise Server
• Information disclosure

Security misconfiguration was identified in GitHub Enterprise Server that allowed sensitive data exposure

• GitHub Enterprise Server
• Information disclosure

Improper authorization allows read access to issue content in GitHub Enterprise Server

• GitHub Enterprise Server
• Broken access control

Improper authorization allows persistent access in GitHub Enterprise Server

• GitHub Enterprise Server
• Broken access control

Cross Site Request Forgery was identified in GitHub Enterprise Server that allowed write in a user owned repository

• GitHub Enterprise Server
• Cross-site request forgery (CSRF)

Denial of Service vulnerability was identified in GitHub Enterprise Server that allowed resource exhaustion

• GitHub Enterprise Server
• Denial of service

Improper Privilege Management allows for access to unauthorized repository content during migration

• GitHub Enterprise Server
• Privilege escalation

Server-side request forgery in GitHub Enterprise Server

• GitHub Enterprise Server
• Server-side request forgery (SSRF)

GitHub Enterprise Server: An authentication bypass vulnerability was present in the GitHub Enterprise Server (GHES)…

• GitHub Enterprise Server
• Authentication bypass

Race Condition was identified in GitHub Enterprise Server that allowed maintaining admin permissions

• GitHub Enterprise Server
• Race condition

Improper Privilege Management was identified in GitHub Enterprise Server that allowed privilege escalation in the Management Console

• GitHub Enterprise Server
• Command injection

Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Management Console

• GitHub Enterprise Server
• CWE-20

Repository administrator can bypass organization's ruleset using deploy keys

• GitHub Enterprise Server
• Privilege escalation

CSRF vulnerability was identified in GitHub Enterprise Server that allowed performing actions on behalf of a user

• GitHub Enterprise Server
• Cross-site request forgery (CSRF)

Improper input validation vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Management Console

• GitHub Enterprise Server
• CWE-20

Remote Code Execution in GitHub Enterprise Server Allowed Administrators to gain SSH access to the appliance

• GitHub Enterprise Server
• CWE-20

Improper Privilege Management vulnerability was identified in GitHub Enterprise Server that allowed Privilege Escalation

• GitHub Enterprise Server
• Privilege escalation

Improper Authorization in GitHub Enterprise Server allowed unauthorized workflow execution

• GitHub Enterprise Server
• Broken access control

Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

• GitHub Enterprise Server
• CWE-20

Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

• GitHub Enterprise Server
• CWE-20

Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

• GitHub Enterprise Server
• CWE-20

Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

• GitHub Enterprise Server
• CWE-20

Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

• GitHub Enterprise Server
• CWE-20

Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

• GitHub Enterprise Server
• Command injection
• CWE-20

Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

• GitHub Enterprise Server
• CWE-20

Path traversal vulnerability in GitHub Enterprise Server that allowed arbitrary file read with a specially crafted GitHub Pages artifact upload

• GitHub Enterprise Server
• Path traversal

Cross-site scripting in GitHub Enterprise Server

• GitHub Enterprise Server
• Cross-site scripting (XSS)

Privilege Escalation by Code Injection in the Management Console in GitHub Enterprise Server

• GitHub Enterprise Server
• CWE-20

Unsafe Reflection in Github Enterprise Server leading to Command Injection

• GitHub Enterprise Server
• Code injection

Improper Authentication in GitHub Enterprise Server leading to Authentication Bypass for Public Repository Data

• GitHub Enterprise Server
• Authentication bypass

Incorrect Authorization allows Read Access to Issue Comments in GitHub Enterprise Server

• GitHub Enterprise Server
• Broken access control

Incorrect Authorization for Issue Comments in GitHub Enterprise Server

• GitHub Enterprise Server
• Broken access control

Insufficient Entropy in GitHub Enterprise Server Management Console Invitation Token

• GitHub Enterprise Server
• CWE-331

Race Condition allows Administrative Access on Organization Repositories

• GitHub Enterprise Server
• Race condition

Improper Privilege Management allows for arbitrary workflows to be run

• GitHub Enterprise Server
• Privilege escalation

Race Condition allows Unauthorized Outside Collaborator

• GitHub Enterprise Server
• Race condition

Sensitive Information in Log File in GitHub Enterprise Server

• GitHub Enterprise Server
• Information disclosure

Sensitive Information in Log File in GitHub Enterprise Server

• GitHub Enterprise Server
• Information disclosure

Path traversal in GitHub Enterprise Server leading to arbitrary file reading when building a GitHub Pages site

• GitHub Enterprise Server
• Path traversal

Time-of-check time-of-use race condition in GitHub Enterprise Server

• GitHub Enterprise Server
• Race condition

Improper Privilege Management in GitHub Enterprise Server management console leads to privilege escalation

• GitHub Enterprise Server
• Privilege escalation

Insecure direct object reference in GitHub Enterprise Server

• GitHub Enterprise Server
• Broken access control

Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling

• GitHub Enterprise Server
• CWE-697

Information disclosure in GitHub Enterprise Server leading to private repository leakage

• GitHub Enterprise Server
• Information disclosure

Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling

• GitHub Enterprise Server
• CWE-697

Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling

• GitHub Enterprise Server
• CWE-697

Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling

• GitHub Enterprise Server
• CWE-697

Improper authentication vulnerability in GitHub Enterprise Server leading to modification of secret gists

• GitHub Enterprise Server
• Authentication bypass

Path traversal in GitHub Enterprise Server leading to remote code execution

• GitHub Enterprise Server
• Path traversal

Information disclosure in GitHub Enterprise Server leading to unauthorized viewing of private repository names

• GitHub Enterprise Server
• Information disclosure

Code injection in GitHub Enterprise Server leading to arbitrary environment variables in GitHub Actions

• GitHub Enterprise Server
• Code injection

Path traversal in GitHub Enterprise Server leading to arbitrary file reading when building a GitHub Pages site

• GitHub Enterprise Server
• Path traversal

Incorrect authorization check in GitHub Enterprise Server leading to escalation of privileges in GraphQL API requests from GitHub Apps using scoped user-to-server tokens

• GitHub Enterprise Server
• Broken access control

Incorrect Authorization in GitHub Enterprise Server leads to Action Workflow modifications without Workflow Scope

• GitHub Enterprise Server
• Broken access control

Path traversal in GitHub Enterprise Server leading to remote code execution in GitHub Pages

• GitHub Enterprise Server
• Path traversal

Improper Limitation of a Pathname to a Restricted Directory in GitHub Enterprise Server leading to RCE

• GitHub Enterprise Server
• Path traversal

Incorrect authorization in GitHub Enterprise Server token generation leading to full admin access

• GitHub Enterprise Server
• Broken access control

Improper Privilege Management in GitHub Enterprise Server leading to page creation and deletion

• GitHub Enterprise Server
• Privilege escalation

Improper Neutralization of Argument Delimiters in a Command in GitHub Enterprise Server leading to Remote Code Execution

• GitHub Enterprise Server
• Command injection

Incomplete cache verification issue in GitHub Enterprise Server leading to exposure of private repo files

• GitHub Enterprise Server
• Information disclosure