| CVE-2024-8810 |
A GitHub App installed in organizations could upgrade some permissions from read to write access without approval from…
|
8.7
High
|
Nov 7, 2024 |
| CVE-2024-10007 |
A path collision and arbitrary code execution vulnerability was identified in GitHub Enterprise Server that allowed…
|
8.7
High
|
Nov 7, 2024 |
| CVE-2024-9487 |
An improper verification of cryptographic signature vulnerability was identified in GitHub Enterprise Server that…
|
9.5
Critical
|
Oct 10, 2024 |
| CVE-2024-6800 |
An XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when using SAML authentication…
|
9.5
Critical
|
Aug 20, 2024 |
| CVE-2024-4985 |
An authentication bypass vulnerability was present in the GitHub Enterprise Server (GHES) when utilizing SAML single…
|
10.0
Critical
|
May 20, 2024 |
| CVE-2024-2440 |
A race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on a detached…
|
5.5
Medium
|
Apr 19, 2024 |
| CVE-2024-3684 |
A server side request forgery vulnerability was identified in GitHub Enterprise Server that allowed an attacker with…
|
8.0
High
|
Apr 19, 2024 |
| CVE-2024-3646 |
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor…
|
8.0
High
|
Apr 19, 2024 |
| CVE-2024-3470 |
An Improper Privilege Management vulnerability was identified in GitHub Enterprise Server that allowed an attacker to…
|
5.9
Medium
|
Apr 19, 2024 |
| CVE-2024-2443 |
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor…
|
9.1
Critical
|
Mar 20, 2024 |
| CVE-2024-2469 |
An attacker with an Administrator role in GitHub Enterprise Server could gain SSH root access via remote code…
|
8.0
High
|
Mar 20, 2024 |
| CVE-2024-1378 |
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor…
|
9.1
Critical
|
Feb 13, 2024 |
| CVE-2024-1369 |
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor…
|
9.1
Critical
|
Feb 13, 2024 |
| CVE-2024-0507 |
An attacker with access to a Management Console user account with the editor role could escalate privileges through a…
|
6.5
Medium
|
Jan 16, 2024 |
| CVE-2024-0200 |
An unsafe reflection vulnerability was identified in GitHub Enterprise Server that could lead to reflection injection
|
7.2
High
|
Jan 16, 2024 |