Skip to contentGithub Enterprise Server vulnerabilities
- github enterprise serverA race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on...CVE-2023-66903.9 Low
- github enterprise serverImproper Privilege Management in GitHub Enterprise Server management console leads to privilege escalationCVE-2023-466478.0 High
- github enterprise serverImproper access control in all versions of GitHub Enterprise Server allows unauthorized users to...CVE-2023-466465.3 Medium
- github enterprise serverIncorrect comparison vulnerability in GitHub Enterprise Server leading to commit smugglingCVE-2023-237664.5 Medium
- github enterprise serverInformation disclosure in GitHub Enterprise Server leading to private repository leakageCVE-2023-237635.3 Medium
- github enterprise serverIncorrect comparison vulnerability in GitHub Enterprise Server leading to commit smugglingCVE-2023-237654.8 Medium
- github enterprise serverIncorrect comparison vulnerability in GitHub Enterprise Server leading to commit smugglingCVE-2023-237644.8 Medium
- github enterprise server, micro focus cobol server, enterprise developer +2 more +4 moreMitigations and availability of updates relating to security vulnerability in ESCWA component CVE-2023-32265.CVE-2023-322657.1 High
- github enterprise serverIncorrect comparison vulnerability in GitHub Enterprise Server leading to commit smugglingCVE-2023-237626.5 Medium
- github enterprise serverImproper authentication vulnerability in GitHub Enterprise Server leading to modification of secret gistsCVE-2023-237617.7 High
- github enterprise serverPath traversal in GitHub Enterprise Server leading to remote code executionCVE-2023-237604.9 Medium
- github enterprise serverInformation disclosure in GitHub Enterprise Server leading to unauthorized viewing of private repository namesCVE-2022-462574.3 Medium
- github enterprise serverCode injection in GitHub Enterprise Server leading to arbitrary environment variables in GitHub ActionsCVE-2023-223814.1 Medium
- github enterprise serverPath traversal in GitHub Enterprise Server leading to arbitrary file reading when building a GitHub Pages siteCVE-2023-223806.5 Medium
- github enterprise serverIncorrect authorization check in GitHub Enterprise Server leading to escalation of privileges in GraphQL API requests from GitHub Apps using scoped user-to-server tokensCVE-2022-237399.8 Critical
- github enterprise serverIncorrect Authorization in GitHub Enterprise Server leads to Action Workflow modifications without Workflow ScopeCVE-2022-462586.5 Medium
- github enterprise serverPath traversal in GitHub Enterprise Server leading to remote code execution in GitHub PagesCVE-2022-462568.8 High
- github enterprise serverImproper Limitation of a Pathname to a Restricted Directory in GitHub Enterprise Server leading to RCECVE-2022-462559.8 Critical
- github enterprise serverIncorrect authorization in GitHub Enterprise Server token generation leading to full admin accessCVE-2022-237417.2 High
- github enterprise serverImproper Privilege Management in GitHub Enterprise Server leading to page creation and deletionCVE-2022-237376.5 Medium
- github enterprise serverImproper Neutralization of Argument Delimiters in a Command in GitHub Enterprise Server leading to Remote Code ExecutionCVE-2022-237408.8 High
- github enterprise serverIncomplete cache verification issue in GitHub Enterprise Server leading to exposure of private repo filesCVE-2022-237385.7 Medium
- github enterprise serverDeserialization of Untrusted Data vulnerability in GitHub Enterprise Server leading to Remote Code ExecutionCVE-2022-237348.8 High
- github enterprise serverStored XSS vulnerability in GitHub Enterprise Server leading to injection of arbitrary attributesCVE-2022-237335.4 Medium
- github enterprise serverPath traversal in GitHub Enterprise Server management console leading to a bypass of CSRF protectionsCVE-2022-237328.8 High
- github enterprise serverImproper control flow in GitHub Enterprise Server hosted Pages leads to remote code executionCVE-2021-415998.8 High
- github enterprise serverUI misrepresentation of granted permissions in GitHub Enterprise Server leading to unauthorized access to userCVE-2021-415988.8 High
- github enterprise serverPath traversal in GitHub Enterprise Server hosted Pages leads to unauthorized file read accessCVE-2021-228706.5 Medium
- github enterprise serverUnsafe configuration options in GitHub Pages leading to path traversal on GitHub Enterprise ServerCVE-2021-228684.3 Medium
- github enterprise serverImproper access control in GitHub Enterprise Server allows self-hosted runners to execute outside their control groupCVE-2021-228699.8 Critical
- github enterprise serverUnsafe configuration options in GitHub Pages leading to path traversal on GitHub Enterprise ServerCVE-2021-228676.5 Medium
- github enterprise serverUI misrepresentation of granted permissions in GitHub Enterprise Server leading to unauthorized access to user resourcesCVE-2021-228668.8 High
- github enterprise serverImproper access control in GitHub Enterprise Server leading to unauthorized read access to private repository metadataCVE-2021-228656.5 Medium
- github enterprise serverUnsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise ServerCVE-2021-228648.8 High
- github, github enterprise server +1 moreImproper access control in GitHub Enterprise Server leading to unauthorized changes to maintainer permissions on pull requestsCVE-2021-228638.1 High
- github, github enterprise server +1 moreImproper access control in GitHub Enterprise Server leading to the disclosure of Actions secrets to forksCVE-2021-228626.5 Medium
- github, github enterprise server +1 moreImproper access control in GitHub Enterprise Server leading to unauthorized write access to forkable repositoriesCVE-2021-228616.5 Medium
- github, github enterprise server +1 moreUnsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise ServerCVE-2020-105198.8 High
- github, github enterprise server +1 moreImproper access control in GitHub Enterprise Server leading to the enumeration of private repository namesCVE-2020-105174.3 Medium
- github, github enterprise server +1 moreUnsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise ServerCVE-2020-105188.8 High
- github, github enterprise server +1 moreImproper access control in GitHub Enterprise Server leading to privilege escalation of organization memberCVE-2020-105169.8 Critical