Advisories · Technology
GitHub Enterprise Server.
Every CVE that names GitHub Enterprise Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Deserialization of Untrusted Data vulnerability in GitHub Enterprise Server leading to Remote Code Execution
- GitHub Enterprise Server
- Insecure deserialization
-
Stored XSS vulnerability in GitHub Enterprise Server leading to injection of arbitrary attributes
- GitHub Enterprise Server
- Cross-site scripting (XSS)
-
Path traversal in GitHub Enterprise Server management console leading to a bypass of CSRF protections
- GitHub Enterprise Server
- Path traversal
-
Improper control flow in GitHub Enterprise Server hosted Pages leads to remote code execution
- GitHub Enterprise Server
- Command injection
-
UI misrepresentation of granted permissions in GitHub Enterprise Server leading to unauthorized access to user
- GitHub Enterprise Server
- CWE-451
-
Path traversal in GitHub Enterprise Server hosted Pages leads to unauthorized file read access
- GitHub Enterprise Server
- Path traversal
-
Unsafe configuration options in GitHub Pages leading to path traversal on GitHub Enterprise Server
- GitHub Enterprise Server
- Command injection
-
Improper access control in GitHub Enterprise Server allows self-hosted runners to execute outside their control group
- GitHub Enterprise Server
- Information disclosure
-
Unsafe configuration options in GitHub Pages leading to path traversal on GitHub Enterprise Server
- GitHub Enterprise Server
- Command injection
-
UI misrepresentation of granted permissions in GitHub Enterprise Server leading to unauthorized access to user resources
- GitHub Enterprise Server
- CWE-451
-
Improper access control in GitHub Enterprise Server leading to unauthorized read access to private repository metadata
- GitHub Enterprise Server
- Broken access control
-
Unsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise Server
- GitHub Enterprise Server
- Command injection
-
Improper access control in GitHub Enterprise Server leading to unauthorized changes to maintainer permissions on pull requests
- GitHub Enterprise Server
- Broken access control
-
Improper access control in GitHub Enterprise Server leading to the disclosure of Actions secrets to forks
- GitHub Enterprise Server
- Broken access control
-
Improper access control in GitHub Enterprise Server leading to unauthorized write access to forkable repositories
- GitHub Enterprise Server
- Broken access control
-
Unsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise Server
- GitHub Enterprise Server
- Command injection
-
Improper access control in GitHub Enterprise Server leading to the enumeration of private repository names
- GitHub Enterprise Server
- Broken access control
-
Unsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise Server
- GitHub Enterprise Server
- Command injection
-
Improper access control in GitHub Enterprise Server leading to privilege escalation of organization member
- GitHub Enterprise Server
- Broken access control