Skip to contentGithub Enterprise Server vulnerabilities
- github enterprise serverA Cross-Site Scripting (XSS) vulnerability was identified in the repository transfer feature of...CVE-2024-87705.8 Medium
- github enterprise serverAn XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when...CVE-2024-68009.5 Critical
- github enterprise serverIncorrect Authorization allows read access to issues in GitHub Enterprise ServerCVE-2024-63375.9 Medium
- github enterprise serverAn Incorrect Authorization vulnerability was identified in GitHub Enterprise Server, allowing an...CVE-2024-77115.3 Medium
- github enterprise serverGitHub Enterprise Server Information Disclosure Vulnerability Exposes Private Repository Names via Deploy KeysCVE-2024-63956.3 Medium
- github enterprise serverSecurity misconfiguration was identified in GitHub Enterprise Server that allowed sensitive data exposureCVE-2024-63366.9 Medium
- github enterprise serverImproper authorization allows read access to issue content in GitHub Enterprise ServerCVE-2024-58175.9 Medium
- github enterprise serverImproper authorization allows persistent access in GitHub Enterprise ServerCVE-2024-58166.9 Medium
- github enterprise serverCross Site Request Forgery was identified in GitHub Enterprise Server that allowed write in a user owned repositoryCVE-2024-58156.8 Medium
- github enterprise serverDenial of Service vulnerability was identified in GitHub Enterprise Server that allowed resource exhaustionCVE-2024-57957.7 High
- github enterprise serverImproper Privilege Management allows for access to unauthorized repository content during migrationCVE-2024-55665.8 Medium
- github enterprise serverA Server-Side Request Forgery vulnerability was identified in GitHub Enterprise Server that...CVE-2024-57467.6 High
- github enterprise serverAn authentication bypass vulnerability was present in the GitHub Enterprise Server (GHES) when...CVE-2024-498510.0 Critical
- github enterprise serverRace Condition was identified in GitHub Enterprise Server that allowed maintaining admin permissionsCVE-2024-24405.5 Medium
- github enterprise serverImproper Privilege Management was identified in GitHub Enterprise Server that allowed privilege escalation in the Management ConsoleCVE-2024-36848.0 High
- github enterprise serverCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Management ConsoleCVE-2024-36468.0 High
- github enterprise serverRepository administrator can bypass organization's ruleset using deploy keysCVE-2024-34705.9 Medium
- github enterprise serverCSRF vulnerability was identified in GitHub Enterprise Server that allowed performing actions on behalf of a userCVE-2024-27484.3 Medium
- github enterprise serverImproper input validation vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Management ConsoleCVE-2024-24439.1 Critical
- github enterprise serverRemote Code Execution in GitHub Enterprise Server Allowed Administrators to gain SSH access to the applianceCVE-2024-24698.0 High
- github enterprise serverImproper Privilege Management vulnerability was identified in GitHub Enterprise Server that allowed Privilege EscalationCVE-2024-19086.3 Medium
- github enterprise serverImproper Authorization in GitHub Enterprise Server allowed unauthorized workflow executionCVE-2024-14827.1 High
- github enterprise serverCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement ConsoleCVE-2024-13789.1 Critical
- github enterprise serverCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement ConsoleCVE-2024-13749.1 Critical
- github enterprise serverCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement ConsoleCVE-2024-13729.1 Critical
- github enterprise serverCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement ConsoleCVE-2024-13699.1 Critical
- github enterprise serverCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement ConsoleCVE-2024-13599.1 Critical
- github enterprise serverCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement ConsoleCVE-2024-13559.1 Critical
- github enterprise serverCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement ConsoleCVE-2024-13548.0 High
- github enterprise serverPath traversal vulnerability in GitHub Enterprise Server that allowed arbitrary file read with a specially crafted GitHub Pages artifact uploadCVE-2024-10826.3 Medium
- github enterprise serverCross-site Scripting in the tag name pattern field in the tag protections UI in GitHub Enterprise...CVE-2024-10846.5 Medium
- github enterprise serverPrivilege Escalation by Code Injection in the Management Console in GitHub Enterprise ServerCVE-2024-0507Public exploitEPSS 65.8%6.5 Medium
- github enterprise serverUnsafe Reflection in Github Enterprise Server leading to Command InjectionCVE-2024-0200EPSS 71.7%7.2 High
- github enterprise serverImproper Authentication in GitHub Enterprise Server leading to Authentication Bypass for Public Repository DataCVE-2023-68477.5 High
- github enterprise serverIncorrect Authorization allows Read Access to Issue Comments in GitHub Enterprise ServerCVE-2023-513802.7 Low
- github enterprise serverIncorrect Authorization for Issue Comments in GitHub Enterprise ServerCVE-2023-513794.9 Medium
- github enterprise serverInsufficient Entropy in GitHub Enterprise Server Management Console Invitation TokenCVE-2023-466488.3 High
- github enterprise serverRace Condition allows Administrative Access on Organization RepositoriesCVE-2023-466496.3 Medium
- github enterprise serverImproper Privilege Management allows for arbitrary workflows to be runCVE-2023-68046.5 Medium
- github enterprise serverRace Condition allows Unauthorized Outside CollaboratorCVE-2023-68035.8 Medium
- github enterprise serverSensitive Information in Log File in GitHub Enterprise ServerCVE-2023-68027.2 High
- github enterprise serverSensitive Information in Log File in GitHub Enterprise ServerCVE-2023-67468.1 High
- github enterprise serverPath traversal in GitHub Enterprise Server leading to arbitrary file reading when building a GitHub Pages siteCVE-2023-466456.8 Medium
- github enterprise serverA race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on...CVE-2023-66903.9 Low
- github enterprise serverImproper Privilege Management in GitHub Enterprise Server management console leads to privilege escalationCVE-2023-466478.0 High
- github enterprise serverImproper access control in all versions of GitHub Enterprise Server allows unauthorized users to...CVE-2023-466465.3 Medium
- github enterprise serverIncorrect comparison vulnerability in GitHub Enterprise Server leading to commit smugglingCVE-2023-237664.5 Medium
- github enterprise serverInformation disclosure in GitHub Enterprise Server leading to private repository leakageCVE-2023-237635.3 Medium
- github enterprise serverIncorrect comparison vulnerability in GitHub Enterprise Server leading to commit smugglingCVE-2023-237654.8 Medium
- github enterprise serverIncorrect comparison vulnerability in GitHub Enterprise Server leading to commit smugglingCVE-2023-237644.8 Medium
- Show moreLoading…