Skip to content

Known vulnerabilities in github Enterprise Server

Is your version affected?

CVE Summary Score Published
CVE-2024-10824 An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed unauthorized internal… 6.0 Medium Nov 7, 2024
CVE-2024-10007 A path collision and arbitrary code execution vulnerability was identified in GitHub Enterprise Server that allowed… 8.7 High Nov 7, 2024
CVE-2024-9487 An improper verification of cryptographic signature vulnerability was identified in GitHub Enterprise Server that… 9.5 Critical Oct 10, 2024
CVE-2024-4985 An authentication bypass vulnerability was present in the GitHub Enterprise Server (GHES) when utilizing SAML single… 10.0 Critical May 20, 2024
CVE-2024-2440 A race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on a detached… 5.5 Medium Apr 19, 2024
CVE-2024-3684 A server side request forgery vulnerability was identified in GitHub Enterprise Server that allowed an attacker with… 8.0 High Apr 19, 2024
CVE-2024-3646 A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor… 8.0 High Apr 19, 2024
CVE-2024-3470 An Improper Privilege Management vulnerability was identified in GitHub Enterprise Server that allowed an attacker to… 5.9 Medium Apr 19, 2024
CVE-2024-2748 A Cross Site Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed an attacker to… 4.3 Medium Mar 20, 2024
CVE-2024-2469 An attacker with an Administrator role in GitHub Enterprise Server could gain SSH root access via remote code… 8.0 High Mar 20, 2024
CVE-2024-1908 An Improper Privilege Management vulnerability was identified in GitHub Enterprise Server that allowed an attacker to… 6.3 Medium Feb 29, 2024
CVE-2024-1482 An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed an attacker to create… 7.1 High Feb 14, 2024
CVE-2024-1378 A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor… 9.1 Critical Feb 13, 2024
CVE-2024-1374 A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor… 9.1 Critical Feb 13, 2024
CVE-2024-1372 A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor… 9.1 Critical Feb 13, 2024
CVE-2024-1369 A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor… 9.1 Critical Feb 13, 2024
CVE-2024-1359 A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor… 9.1 Critical Feb 13, 2024
CVE-2024-1355 A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor… 9.1 Critical Feb 13, 2024
CVE-2024-1354 A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor… 8.0 High Feb 13, 2024
CVE-2024-1082 A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an attacker to gain… 6.3 Medium Feb 13, 2024
CVE-2024-1084 Cross-site Scripting in the tag name pattern field in the tag protections UI in GitHub Enterprise Server allows a… 6.5 Medium Feb 13, 2024
CVE-2024-0507 An attacker with access to a Management Console user account with the editor role could escalate privileges through a… 6.5 Medium Jan 16, 2024
CVE-2024-0200 An unsafe reflection vulnerability was identified in GitHub Enterprise Server that could lead to reflection injection 7.2 High Jan 16, 2024
CVE-2023-6847 An improper authentication vulnerability was identified in GitHub Enterprise Server that allowed a bypass of Private… 7.5 High Dec 21, 2023
CVE-2023-51380 An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed issue comments to be… 2.7 Low Dec 21, 2023

Other github products