5.8
Medium
CVE-2023-6803 A race condition in GitHub Enterprise Server allows an outside collaborator to be added while a repository is being…
Description
A race condition in GitHub Enterprise Server allows an outside collaborator to be added while a repository is being transferred. This vulnerability affected all versions of GitHub Enterprise Server since 3.8 and was fixed in version 3.8.12, 3.9.7, 3.10.4, and 3.11.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Enterprise Server 3.11 | 3.11 → 3.11.0 | No fix stated |
| Enterprise Server 3.10 | 3.10 → 3.10.3 | No fix stated |
| Enterprise Server 3.9 | 3.9 → 3.9.6 | No fix stated |
| Enterprise Server 3.8 | 3.8 → 3.8.11 | No fix stated |
Other CVEs of Enterprise Server
The 94 CVEs of Enterprise Server →
CVE-2026-118237
Out-of-bounds read vulnerability in GitHub Enterprise Server allowed disclosure of process memory in the Git service
5.3
Medium
CVE-2026-110288
Cross-site request forgery vulnerability in GitHub Enterprise Server allowed deletion of stored ChatOps configuration through the Management Console
5.3
Medium
CVE-2026-104608
Use-after-free vulnerability in GitHub Enterprise Server allowed remote code execution in the Git service
7.7
High
CVE-2026-96890
A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed a…
8.7
High