Github vulnerabilities
165 CVEs and advisories name Github as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-1374Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console
- CVE-2024-1372Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console
- CVE-2024-1369Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console
- CVE-2024-1359Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console
- CVE-2024-1355Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console
- CVE-2024-1354Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console
- CVE-2024-1082Path traversal vulnerability in GitHub Enterprise Server that allowed arbitrary file read with a specially crafted GitHub Pages artifact upload
- CVE-2024-1084Cross-site Scripting in the tag name pattern field in the tag protections UI in GitHub Enterprise Server allows a malicious website that req
- CVE-2024-0507Privilege Escalation by Code Injection in the Management Console in GitHub Enterprise Server
- CVE-2024-0200Unsafe Reflection in Github Enterprise Server leading to Command Injection
- CVE-2023-6847Improper Authentication in GitHub Enterprise Server leading to Authentication Bypass for Public Repository Data
- CVE-2023-51380Incorrect Authorization allows Read Access to Issue Comments in GitHub Enterprise Server
- CVE-2023-51379Incorrect Authorization for Issue Comments in GitHub Enterprise Server
- CVE-2023-46648Insufficient Entropy in GitHub Enterprise Server Management Console Invitation Token
- CVE-2023-46649Race Condition allows Administrative Access on Organization Repositories
- CVE-2023-6804Improper Privilege Management allows for arbitrary workflows to be run
- CVE-2023-6803Race Condition allows Unauthorized Outside Collaborator
- CVE-2023-6802Sensitive Information in Log File in GitHub Enterprise Server
- CVE-2023-6746Sensitive Information in Log File in GitHub Enterprise Server
- CVE-2023-46645Path traversal in GitHub Enterprise Server leading to arbitrary file reading when building a GitHub Pages site
- CVE-2023-6690A race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on transferred repositories by making a Graph
- CVE-2023-46647Improper Privilege Management in GitHub Enterprise Server management console leads to privilege escalation
- CVE-2023-46646Improper access control in all versions of GitHub Enterprise Server allows unauthorized users to view private repository names via the "Get
- CVE-2023-23766Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling
- CVE-2023-23763Information disclosure in GitHub Enterprise Server leading to private repository leakage
- CVE-2023-23765Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling
- CVE-2023-23764Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling
- CVE-2023-37463Quadratic complexity bugs may lead to a denial of service
- CVE-2023-23762Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling
- CVE-2023-23761Improper authentication vulnerability in GitHub Enterprise Server leading to modification of secret gists