CVE-2023-6690: Race Condition
A race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on transferred repositories by making a GraphQL mutation to alter repository permissions during the transfer. This vulnerability affected GitHub Enterprise Server version 3.8.0 and above and was fixed in version 3.8.12, 3.9.7, 3.10.4, and 3.11.1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-6690?
CVE-2023-6690 is classified as a moderate vulnerability due to its potential impact on repository permission integrity.
How do I fix CVE-2023-6690?
To fix CVE-2023-6690, upgrade GitHub Enterprise Server to version 3.8.12, 3.9.7, 3.10.4, or later.
Who is affected by CVE-2023-6690?
CVE-2023-6690 affects administrators using GitHub Enterprise Server versions 3.8.0 through 3.11.0.
What type of issue is CVE-2023-6690?
CVE-2023-6690 is a race condition vulnerability that allows privilege escalation during repository transfers.
When was CVE-2023-6690 discovered?
CVE-2023-6690 was disclosed in 2023 and affects multiple versions of GitHub Enterprise Server.