| CVE-2025-6600 |
An exposure of sensitive information vulnerability was identified in GitHub Enterprise Server that could allow an…
|
6.3
Medium
|
Jul 1, 2025 |
| CVE-2025-3246 |
An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed cross-site…
|
8.6
High
|
Apr 17, 2025 |
| CVE-2024-9539 |
An information disclosure vulnerability was identified in GitHub Enterprise Server via attacker uploaded asset URL…
|
5.7
Medium
|
Oct 11, 2024 |
| CVE-2024-8263 |
An improper privilege management vulnerability allowed arbitrary workflows to be committed using an improperly scoped…
|
6.2
Medium
|
Sep 23, 2024 |
| CVE-2024-8770 |
A Cross-Site Scripting (XSS) vulnerability was identified in the repository transfer feature of GitHub Enterprise…
|
5.8
Medium
|
Sep 23, 2024 |
| CVE-2024-6800 |
An XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when using SAML authentication…
|
9.5
Critical
|
Aug 20, 2024 |
| CVE-2024-6337 |
An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed a GitHub App with…
|
5.9
Medium
|
Aug 20, 2024 |
| CVE-2024-7711 |
An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server, allowing an attacker to update…
|
5.3
Medium
|
Aug 20, 2024 |
| CVE-2024-6395 |
An exposure of sensitive information vulnerability in GitHub Enterprise Server would allow an attacker to enumerate…
|
6.3
Medium
|
Jul 16, 2024 |
| CVE-2024-6336 |
A Security Misconfiguration vulnerability in GitHub Enterprise Server allowed sensitive information disclosure to…
|
6.9
Medium
|
Jul 16, 2024 |
| CVE-2024-5817 |
An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed read access to issue…
|
5.9
Medium
|
Jul 16, 2024 |
| CVE-2024-5816 |
An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed a suspended GitHub…
|
6.9
Medium
|
Jul 16, 2024 |
| CVE-2024-5815 |
A Cross-Site Request Forgery vulnerability in GitHub Enterprise Server allowed write operations on a victim-owned…
|
6.8
Medium
|
Jul 16, 2024 |
| CVE-2024-5795 |
A Denial of Service vulnerability was identified in GitHub Enterprise Server that allowed an attacker to cause unbounded…
|
7.7
High
|
Jul 16, 2024 |
| CVE-2024-5566 |
An improper privilege management vulnerability allowed users to migrate private repositories without having…
|
5.8
Medium
|
Jul 16, 2024 |
| CVE-2024-5746 |
A Server-Side Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed an attacker with the…
|
7.6
High
|
Jun 20, 2024 |
| CVE-2024-2443 |
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor…
|
9.1
Critical
|
Mar 20, 2024 |
| CVE-2022-46257 |
An information disclosure vulnerability was identified in GitHub Enterprise Server that allowed private repositories…
|
Not rated
|
Mar 7, 2023 |
| CVE-2023-22380 |
A path traversal vulnerability was identified in GitHub Enterprise Server that allowed arbitrary file reading when…
|
6.5
Medium
|
Feb 16, 2023 |
| CVE-2022-23739 |
An incorrect authorization vulnerability was identified in GitHub Enterprise Server, allowing for escalation of…
|
9.8
Critical
|
Jan 17, 2023 |
| CVE-2022-46258 |
An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository-scoped…
|
6.5
Medium
|
Jan 9, 2023 |
| CVE-2022-46256 |
A path traversal vulnerability was identified in GitHub Enterprise Server that allowed remote code execution when…
|
8.8
High
|
Dec 14, 2022 |
| CVE-2022-46255 |
An improper limitation of a pathname to a restricted directory vulnerability was identified in GitHub Enterprise…
|
9.8
Critical
|
Dec 14, 2022 |
| CVE-2022-23741 |
An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a scoped user-to-server…
|
7.2
High
|
Dec 14, 2022 |
| CVE-2022-23737 |
An improper privilege management vulnerability was identified in GitHub Enterprise Server that allowed users with…
|
6.5
Medium
|
Dec 1, 2022 |