Report feedback

An authenticated remote attacker with permissions to read content and create "pull requests" can disclose information related to "issues" from a private repository without authorization [5].

The vulnerability is present in product:

• GitHub Enterprise Server; <3.10.16; >=3.11, <3.11.14; >=3.12, <3.12.8; >=3.13, <3.13.3;

CVSS: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N

More information:

• CVE-2024-6337 at cve.org, NVD
• CWE-863: Incorrect Authorization at cwe.mitre.org

The vulnerability was publicly disclosed 20. 8. 2024.

An authenticated remote attacker can modify information related to "issues" in public repositories without authorization [6].

The vulnerability is present in product:

• GitHub Enterprise Server; >=3.11, <3.11.14; >=3.12, <3.12.8; >=3.13, <3.13.3;

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

More information:

• CVE-2024-7711 at cve.org, NVD
• CWE-863: Incorrect Authorization at cwe.mitre.org

The vulnerability was publicly disclosed 20. 8. 2024.

An unauthenticated remote attacker can gain access to the site's administrator accounts using a specially crafted SAML response. The vulnerability is exploitable only if the instance uses SAML SSO authentication with specific identity providers (IdP) that use publicly available signed federation metadata in XML format [7].

The vulnerability is present in product:

• GitHub Enterprise Server; <3.10.16; >=3.11, <3.11.14; >=3.12, <3.12.8; >=3.13, <3.13.3;

CVSS: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

More information:

• CVE-2024-6800 at cve.org, NVD
• CWE-347: Improper Verification of Cryptographic Signature at cwe.mitre.org

The vulnerability was publicly disclosed 20. 8. 2024.