CVE-2022-23732
Path traversal in GitHub Enterprise Server management console leading to a bypass of CSRF protections
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 3.1.19, 3.2.11, 3.3.6, 3.4.1
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
A path traversal vulnerability was identified in GitHub Enterprise Server management console that allowed the bypass of CSRF protections. This could potentially lead to privilege escalation. To exploit this vulnerability, an attacker would need to target a user that was actively logged into the management console. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.5 and was fixed in versions 3.1.19, 3.2.11, 3.3.6, 3.4.1. This vulnerability was reported via the GitHub Bug Bounty program.
Timeline
- CVE published
- Record last updated
Affected versions
- GitHub GitHub Enterprise Server
From 3.1 · fixed in 3.1.19; From 3.2 · fixed in 3.2.11; From 3.3 · fixed in 3.3.6; From 3.4 · fixed in 3.4.1