Latest vulnerabilities for "github enterprise"

GitHub Enterprise ServerMarkdown math block sanitization bypass allows privilege escalation and unauthorized workflow triggers

Risk 41

Severity

8.6

EPSS

0.05%

First published (updated )

CVE-2025-3246

GitHub Enterprise ServerMissing Authorization vulnerability was identified in GitHub Enterprise Server that allowed unauthorized access to private repository names

Risk 26

Severity

5.3

First published (updated )

CVE-2025-3124

GitHub Enterprise ServerCode Injection Vulnerability in GitHub Enterprise Server Allows Arbitrary Code Execution via Message Handling

Risk 48

Severity

7.1

First published (updated )

CVE-2024-10001

GitHub Enterprise ServerImproper Verification of Cryptographic Signature in GitHub Enterprise Server Allows Signature Spoofing by Improper Validation

Risk 56

Severity

8.8

EPSS

0.04%

First published (updated )

CVE-2025-23369

GitHub Enterprise ServerPrivilege Management vulnerability was identified in GitHub Enterprise Server that allowed GitHub Apps to grant themselves write access

Risk 52

Severity

8.7

EPSS

0.04%

First published (updated )

CVE-2024-8810

GitHub Enterprise ServerAuthorization Bypass Vulnerability was Identified in GitHub Enterprise Server that Allowed Unauthorized Internal Users to Access Secret Scanning Alert Data

Risk 38

Severity

6.5

First published (updated )

CVE-2024-10824

GitHub Enterprise ServerPre-Receive Hook Path Collision Vulnerability in GitHub Enterprise Server Allowing Privilege Escalation

Risk 72

Severity

9.1

First published (updated )

CVE-2024-10007

github Enterprise ServerInfoleak

Risk 24

Severity

5.7

EPSS

0.05%

First published (updated )

CVE-2024-9539

github Enterprise ServerAn Improper Verification of Cryptographic Signature vulnerability was identified in GitHub Enterprise Server that allowed SAML SSO authentication to be bypassed when the encrypted assertions feature was enabled

Risk 51

Severity

9.5

EPSS

0.83%

First published (updated )

CVE-2024-9487

github Enterprise ServerAn improper privilege management vulnerability allowed arbitrary workflows to be committed using an …

Risk 33

Severity

6.2

EPSS

0.06%

First published (updated )

CVE-2024-8263

github Enterprise ServerXSS

Risk 28

Severity

6.1

EPSS

0.05%

First published (updated )

CVE-2024-8770

github Enterprise ServerAn XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when using SA…

Risk 62

Severity

9.8

EPSS

0.04%

First published (updated )

CVE-2024-6800

github Enterprise ServerIncorrect Authorization allows read access to issues in GitHub Enterprise Server

Risk 28

Severity

6.5

EPSS

0.04%

First published (updated )

CVE-2024-6337

github Enterprise ServerAn Incorrect Authorization vulnerability was identified in GitHub Enterprise Server, allowing an att…

Risk 25

Severity

5.3

EPSS

0.05%

First published (updated )

CVE-2024-7711

GitHub Enterprise ServerRace Condition was identified in GitHub Enterprise Server that allowed maintaining admin permissions

Risk 45

Severity

5.9

First published (updated )

CVE-2024-2440

GitHub Enterprise ServerImproper Privilege Management was identified in GitHub Enterprise Server that allowed privilege escalation in the Management Console

Risk 49

Severity

8

EPSS

0.04%

First published (updated )

CVE-2024-3684

GitHub Enterprise ServerCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Management Console

Risk 49

Severity

8

EPSS

0.04%

First published (updated )

CVE-2024-3646

GitHub Enterprise ServerRepository administrator can bypass organization's ruleset using deploy keys

Risk 49

Severity

7.2

EPSS

0.04%

First published (updated )

CVE-2024-3470

GitHub Enterprise ServerCSRF vulnerability was identified in GitHub Enterprise Server that allowed performing actions on behalf of a user

Risk 16

Severity

4.3

EPSS

0.04%

First published (updated )

CVE-2024-2748

GitHub Enterprise ServerImproper input validation vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Management Console

Risk 72

Severity

9.1

First published (updated )

CVE-2024-2443

GitHub Enterprise ServerRemote Code Execution in GitHub Enterprise Server Allowed Administrators to gain SSH access to the appliance

Risk 65

Severity

8

First published (updated )

CVE-2024-2469

GitHub Enterprise ServerImproper Privilege Management vulnerability was identified in GitHub Enterprise Server that allowed Privilege Escalation

Risk 38

Severity

6.5

First published (updated )

CVE-2024-1908

github Enterprise ServerPrivilege Escalation by Code Injection in the Management Console in GitHub Enterprise Server

Risk 58

Severity

8.8

EPSS

0.06%

First published (updated )

CVE-2024-0507

github Enterprise ServerUnsafe Reflection in Github Enterprise Server leading to Command Injection

Risk 62

Severity

9.8

EPSS

0.37%

First published (updated )

CVE-2024-0200

github Enterprise ServerImproper Authentication in GitHub Enterprise Server leading to Authentication Bypass for Public Repository Data

Risk 31

Severity

7.5

EPSS

0.06%

First published (updated )

CVE-2023-6847

github Enterprise ServerIncorrect Authorization allows Read Access to Issue Comments in GitHub Enterprise Server

Risk 22

Severity

4.3

First published (updated )

CVE-2023-51380

github Enterprise ServerIncorrect Authorization for Issue Comments in GitHub Enterprise Server

Risk 30

Severity

4.9

First published (updated )

CVE-2023-51379

github Enterprise ServerInsufficient Entropy in GitHub Enterprise Server Management Console Invitation Token

Risk 71

Severity

8.3

First published (updated )

CVE-2023-46648

github Enterprise ServerRace Condition allows Administrative Access on Organization Repositories

Risk 63

Severity

7

First published (updated )

CVE-2023-46649

github Enterprise ServerImproper Privilege Management allows for arbitrary workflows to be run

Risk 41

Severity

6.5

EPSS

0.04%

First published (updated )

CVE-2023-6804

Trending

Versions

GitHub Enterprise ServerMarkdown math block sanitization bypass allows privilege escalation and unauthorized workflow triggers

GitHub Enterprise ServerMissing Authorization vulnerability was identified in GitHub Enterprise Server that allowed unauthorized access to private repository names

GitHub Enterprise ServerCode Injection Vulnerability in GitHub Enterprise Server Allows Arbitrary Code Execution via Message Handling

GitHub Enterprise ServerImproper Verification of Cryptographic Signature in GitHub Enterprise Server Allows Signature Spoofing by Improper Validation

GitHub Enterprise ServerPrivilege Management vulnerability was identified in GitHub Enterprise Server that allowed GitHub Apps to grant themselves write access

Don't miss critical vulnerabilities

GitHub Enterprise ServerAuthorization Bypass Vulnerability was Identified in GitHub Enterprise Server that Allowed Unauthorized Internal Users to Access Secret Scanning Alert Data

GitHub Enterprise ServerPre-Receive Hook Path Collision Vulnerability in GitHub Enterprise Server Allowing Privilege Escalation

github Enterprise ServerInfoleak

github Enterprise ServerAn Improper Verification of Cryptographic Signature vulnerability was identified in GitHub Enterprise Server that allowed SAML SSO authentication to be bypassed when the encrypted assertions feature was enabled

github Enterprise ServerAn improper privilege management vulnerability allowed arbitrary workflows to be committed using an …

Don't miss critical vulnerabilities

github Enterprise ServerXSS

github Enterprise ServerAn XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when using SA…

github Enterprise ServerIncorrect Authorization allows read access to issues in GitHub Enterprise Server

github Enterprise ServerAn Incorrect Authorization vulnerability was identified in GitHub Enterprise Server, allowing an att…

GitHub Enterprise ServerRace Condition was identified in GitHub Enterprise Server that allowed maintaining admin permissions

Don't miss critical vulnerabilities

GitHub Enterprise ServerImproper Privilege Management was identified in GitHub Enterprise Server that allowed privilege escalation in the Management Console

GitHub Enterprise ServerCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Management Console

GitHub Enterprise ServerRepository administrator can bypass organization's ruleset using deploy keys

GitHub Enterprise ServerCSRF vulnerability was identified in GitHub Enterprise Server that allowed performing actions on behalf of a user

GitHub Enterprise ServerImproper input validation vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Management Console

Don't miss critical vulnerabilities

GitHub Enterprise ServerRemote Code Execution in GitHub Enterprise Server Allowed Administrators to gain SSH access to the appliance

GitHub Enterprise ServerImproper Privilege Management vulnerability was identified in GitHub Enterprise Server that allowed Privilege Escalation

github Enterprise ServerPrivilege Escalation by Code Injection in the Management Console in GitHub Enterprise Server

github Enterprise ServerUnsafe Reflection in Github Enterprise Server leading to Command Injection

github Enterprise ServerImproper Authentication in GitHub Enterprise Server leading to Authentication Bypass for Public Repository Data

Don't miss critical vulnerabilities

github Enterprise ServerIncorrect Authorization allows Read Access to Issue Comments in GitHub Enterprise Server

github Enterprise ServerIncorrect Authorization for Issue Comments in GitHub Enterprise Server

github Enterprise ServerInsufficient Entropy in GitHub Enterprise Server Management Console Invitation Token

github Enterprise ServerRace Condition allows Administrative Access on Organization Repositories

github Enterprise ServerImproper Privilege Management allows for arbitrary workflows to be run

Don't miss critical vulnerabilities

Company

Resources

Contact