Aller au contenu

Vulnérabilités connues pour GitHub Enterprise Server

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2025-6600 An exposure of sensitive information vulnerability was identified in GitHub Enterprise Server that could allow an… 6.3 Moyenne 1 juil. 2025
CVE-2025-3246 An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed cross-site… 8.6 Élevée 17 avr. 2025
CVE-2024-9539 An information disclosure vulnerability was identified in GitHub Enterprise Server via attacker uploaded asset URL… 5.7 Moyenne 11 oct. 2024
CVE-2024-8263 An improper privilege management vulnerability allowed arbitrary workflows to be committed using an improperly scoped… 6.2 Moyenne 23 sept. 2024
CVE-2024-8770 A Cross-Site Scripting (XSS) vulnerability was identified in the repository transfer feature of GitHub Enterprise… 5.8 Moyenne 23 sept. 2024
CVE-2024-6800 An XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when using SAML authentication… 9.5 Critique 20 août 2024
CVE-2024-6337 An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed a GitHub App with… 5.9 Moyenne 20 août 2024
CVE-2024-7711 An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server, allowing an attacker to update… 5.3 Moyenne 20 août 2024
CVE-2024-6395 An exposure of sensitive information vulnerability in GitHub Enterprise Server would allow an attacker to enumerate… 6.3 Moyenne 16 juil. 2024
CVE-2024-6336 A Security Misconfiguration vulnerability in GitHub Enterprise Server allowed sensitive information disclosure to… 6.9 Moyenne 16 juil. 2024
CVE-2024-5817 An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed read access to issue… 5.9 Moyenne 16 juil. 2024
CVE-2024-5816 An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed a suspended GitHub… 6.9 Moyenne 16 juil. 2024
CVE-2024-5815 A Cross-Site Request Forgery vulnerability in GitHub Enterprise Server allowed write operations on a victim-owned… 6.8 Moyenne 16 juil. 2024
CVE-2024-5795 A Denial of Service vulnerability was identified in GitHub Enterprise Server that allowed an attacker to cause unbounded… 7.7 Élevée 16 juil. 2024
CVE-2024-5566 An improper privilege management vulnerability allowed users to migrate private repositories without having… 5.8 Moyenne 16 juil. 2024
CVE-2024-5746 A Server-Side Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed an attacker with the… 7.6 Élevée 20 juin 2024
CVE-2024-2443 A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor… 9.1 Critique 20 mars 2024
CVE-2022-46257 An information disclosure vulnerability was identified in GitHub Enterprise Server that allowed private repositories… Non notée 7 mars 2023
CVE-2023-22380 A path traversal vulnerability was identified in GitHub Enterprise Server that allowed arbitrary file reading when… 6.5 Moyenne 16 févr. 2023
CVE-2022-23739 An incorrect authorization vulnerability was identified in GitHub Enterprise Server, allowing for escalation of… 9.8 Critique 17 janv. 2023
CVE-2022-46258 An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository-scoped… 6.5 Moyenne 9 janv. 2023
CVE-2022-46256 A path traversal vulnerability was identified in GitHub Enterprise Server that allowed remote code execution when… 8.8 Élevée 14 déc. 2022
CVE-2022-46255 An improper limitation of a pathname to a restricted directory vulnerability was identified in GitHub Enterprise… 9.8 Critique 14 déc. 2022
CVE-2022-23741 An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a scoped user-to-server… 7.2 Élevée 14 déc. 2022
CVE-2022-23737 An improper privilege management vulnerability was identified in GitHub Enterprise Server that allowed users with… 6.5 Moyenne 1 déc. 2022

Autres produits github