Skip to content

Known vulnerabilities in github Enterprise Server

Is your version affected?

CVE Summary Score Published
CVE-2023-51379 An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed issue comments to be… 4.9 Medium Dec 21, 2023
CVE-2023-46648 An insufficient entropy vulnerability was identified in GitHub Enterprise Server (GHES) that allowed an attacker to… 8.3 High Dec 21, 2023
CVE-2023-46649 A race condition in GitHub Enterprise Server was identified that could allow an attacker administrator access 6.3 Medium Dec 21, 2023
CVE-2023-6804 Improper privilege management allowed arbitrary workflows to be committed and run using an improperly scoped PAT 6.5 Medium Dec 21, 2023
CVE-2023-6803 A race condition in GitHub Enterprise Server allows an outside collaborator to be added while a repository is being… 5.8 Medium Dec 21, 2023
CVE-2023-6802 An insertion of sensitive information into the log file in the audit log in GitHub Enterprise Server was identified that… 7.2 High Dec 21, 2023
CVE-2023-6746 An insertion of sensitive information into log file vulnerability was identified in the log files for a GitHub… 8.1 High Dec 21, 2023
CVE-2023-46645 A path traversal vulnerability was identified in GitHub Enterprise Server that allowed arbitrary file reading when… 6.8 Medium Dec 21, 2023
CVE-2023-6690 A race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on transferred… 3.9 Low Dec 21, 2023
CVE-2023-46647 Improper privilege management in all versions of GitHub Enterprise Server allows users with authorized access to the… 8.0 High Dec 21, 2023
CVE-2023-46646 Improper access control in all versions of GitHub Enterprise Server allows unauthorized users to view private repository… 5.3 Medium Dec 21, 2023
CVE-2023-23766 An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by… 4.5 Medium Sep 22, 2023
CVE-2023-23763 An authorization/sensitive information disclosure vulnerability was identified in GitHub Enterprise Server that… 5.3 Medium Sep 1, 2023
CVE-2023-23765 An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by… 4.8 Medium Aug 30, 2023
CVE-2023-23764 An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by… 4.8 Medium Jul 27, 2023
CVE-2023-23762 An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by… 6.5 Medium Apr 7, 2023
CVE-2023-23761 An improper authentication vulnerability was identified in GitHub Enterprise Server that allowed an unauthorized actor… 7.7 High Apr 7, 2023
CVE-2023-23760 A path traversal vulnerability was identified in GitHub Enterprise Server that allowed remote code execution when… 4.9 Medium Mar 8, 2023
CVE-2023-22381 A code injection vulnerability was identified in GitHub Enterprise Server that allowed setting arbitrary environment… 4.1 Medium Mar 2, 2023

Other github products