| CVE-2024-8810 |
A GitHub App installed in organizations could upgrade some permissions from read to write access without approval from…
|
8.7
Élevée
|
7 nov. 2024 |
| CVE-2024-10007 |
A path collision and arbitrary code execution vulnerability was identified in GitHub Enterprise Server that allowed…
|
8.7
Élevée
|
7 nov. 2024 |
| CVE-2024-9487 |
An improper verification of cryptographic signature vulnerability was identified in GitHub Enterprise Server that…
|
9.5
Critique
|
10 oct. 2024 |
| CVE-2024-6800 |
An XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when using SAML authentication…
|
9.5
Critique
|
20 août 2024 |
| CVE-2024-4985 |
An authentication bypass vulnerability was present in the GitHub Enterprise Server (GHES) when utilizing SAML single…
|
10.0
Critique
|
20 mai 2024 |
| CVE-2024-2440 |
A race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on a detached…
|
5.5
Moyenne
|
19 avr. 2024 |
| CVE-2024-3684 |
A server side request forgery vulnerability was identified in GitHub Enterprise Server that allowed an attacker with…
|
8.0
Élevée
|
19 avr. 2024 |
| CVE-2024-3646 |
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor…
|
8.0
Élevée
|
19 avr. 2024 |
| CVE-2024-3470 |
An Improper Privilege Management vulnerability was identified in GitHub Enterprise Server that allowed an attacker to…
|
5.9
Moyenne
|
19 avr. 2024 |
| CVE-2024-2443 |
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor…
|
9.1
Critique
|
20 mars 2024 |
| CVE-2024-2469 |
An attacker with an Administrator role in GitHub Enterprise Server could gain SSH root access via remote code…
|
8.0
Élevée
|
20 mars 2024 |
| CVE-2024-1378 |
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor…
|
9.1
Critique
|
13 févr. 2024 |
| CVE-2024-1369 |
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor…
|
9.1
Critique
|
13 févr. 2024 |
| CVE-2024-0507 |
An attacker with access to a Management Console user account with the editor role could escalate privileges through a…
|
6.5
Moyenne
|
16 janv. 2024 |
| CVE-2024-0200 |
An unsafe reflection vulnerability was identified in GitHub Enterprise Server that could lead to reflection injection
|
7.2
Élevée
|
16 janv. 2024 |