Latest vulnerabilities for "github enterprise server" 3.10.0

8.1

EPSS

0.09%

First published (updated )

CVE-2023-6746

GitHub Enterprise ServerImproper access control in all versions of GitHub Enterprise Server allows unauthorized users to vie…

5.3

First published (updated )

CVE-2023-46646

GitHub Enterprise ServerIncorrect Authorization allows Read Access to Issue Comments in GitHub Enterprise Server

4.3

First published (updated )

CVE-2023-51380

GitHub Enterprise ServerIncorrect Authorization for Issue Comments in GitHub Enterprise Server

4.9

First published (updated )

CVE-2023-51379

GitHub Enterprise ServerImproper Privilege Management allows for arbitrary workflows to be run

6.5

EPSS

0.04%

First published (updated )

CVE-2023-6804

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitHub Enterprise ServerPrivilege Escalation by Code Injection in the Management Console in GitHub Enterprise Server

8.8

EPSS

0.06%

First published (updated )

CVE-2024-0507

GitHub Enterprise ServerPath traversal vulnerability in GitHub Enterprise Server that allowed arbitrary file read with a specially crafted GitHub Pages artifact upload

6.5

First published (updated )

CVE-2024-1082

GitHub Enterprise ServerXSS, CSRF

6.5

First published (updated )

CVE-2024-1084

GitHub Enterprise ServerAn XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when using SA…

critical

9.8

EPSS

0.04%

First published (updated )

CVE-2024-6800

GitHub Enterprise ServerAn improper privilege management vulnerability allowed arbitrary workflows to be committed using an …

6.2

EPSS

0.06%

First published (updated )

CVE-2024-8263

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitHub Enterprise ServerIncorrect Authorization allows read access to issues in GitHub Enterprise Server

6.5

EPSS

0.04%

First published (updated )

CVE-2024-6337

GitHub Enterprise ServerXSS

6.1

EPSS

0.05%

First published (updated )

CVE-2024-8770

GitHub Enterprise ServerIncorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling

6.5

First published (updated )

CVE-2023-23766

GitHub Enterprise ServerImproper Privilege Management allows for access to unauthorized repository content during migration

6.5

EPSS

0.04%

First published (updated )

CVE-2024-5566

GitHub Enterprise ServerGitHub Enterprise Server Information Disclosure Vulnerability Exposes Private Repository Names via Deploy Keys

6.3

EPSS

0.04%

First published (updated )

CVE-2024-6395

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitHub Enterprise ServerCross Site Request Forgery was identified in GitHub Enterprise Server that allowed write in a user owned repository

6.8

EPSS

0.04%

First published (updated )

CVE-2024-5815

GitHub Enterprise ServerDenial of Service vulnerability was identified in GitHub Enterprise Server that allowed resource exhaustion

7.7

EPSS

0.04%

First published (updated )

CVE-2024-5795

GitHub Enterprise ServerImproper authorization allows persistent access in GitHub Enterprise Server

6.9

EPSS

0.04%

First published (updated )

CVE-2024-5816

GitHub Enterprise ServerSecurity misconfiguration was identified in GitHub Enterprise Server that allowed sensitive data exposure

6.9

EPSS

0.04%

First published (updated )

CVE-2024-6336

GitHub Enterprise ServerImproper authorization allows read access to issue content in GitHub Enterprise Server

6.5

EPSS

0.04%

First published (updated )

CVE-2024-5817

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitHub Enterprise ServerPath traversal in GitHub Enterprise Server leading to arbitrary file reading when building a GitHub Pages site

6.8

First published (updated )

CVE-2023-46645

GitHub Enterprise ServerSensitive Information in Log File in GitHub Enterprise Server

7.2

EPSS

0.06%

First published (updated )

CVE-2023-6802

GitHub Enterprise ServerCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

critical

9.1

First published (updated )

CVE-2024-1369

GitHub Enterprise ServerCommand injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

critical

9.1

First published (updated )

CVE-2024-1378

GitHub Enterprise ServerImproper Privilege Management in GitHub Enterprise Server management console leads to privilege escalation

8.8

First published (updated )

CVE-2023-46647

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GitHub Enterprise ServerInsufficient Entropy in GitHub Enterprise Server Management Console Invitation Token

8.3

First published (updated )

CVE-2023-46648

GitHub Enterprise ServerRace Condition allows Administrative Access on Organization Repositories

7

First published (updated )

CVE-2023-46649

GitHub Enterprise ServerImproper Authentication in GitHub Enterprise Server leading to Authentication Bypass for Public Repository Data

7.5

EPSS

0.06%

First published (updated )

CVE-2023-6847

GitHub Enterprise ServerRace Condition allows Unauthorized Outside Collaborator

5.8

EPSS

0.04%

First published (updated )

CVE-2023-6803

GitHub Enterprise ServerRace Condition

low

3.9

EPSS

0.08%

First published (updated )

CVE-2023-6690

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.