This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] GitHub Enterprise Server 3.12.1 fixes 4 vulnerabilities

GitHub Enterprise Server version 3.12.1 fixes 4 vulnerabilities.

GitHub - RCE (CVE-2024-2469)
CVSS 8.0 (High)

An authenticated remote attacker with the administrator role can gain access to the SSH root account through remote code execution [1].

The vulnerability is present in product:

  • GitHub Enterprise Server; >=3.8.0, <3.12.1

CVSS: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

More information:

The vulnerability was publicly disclosed 20. 3. 2024.

GitHub - (CVE-2024-2443)
CVSS 9.1 (Critical)

An authenticated remote attacker with the editor role in the management console can gain administrative SSH access to the appliance when configuring GeoJSON settings [2].

The vulnerability is present in product:

  • GitHub Enterprise Server; <3.8.0

CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

More information:

The vulnerability was publicly disclosed 20. 3. 2024.

GitHub - (CVE-2024-2440)
CVSS 5.9 (Medium)

An attacker can, through a GraphQL mutation and a change of repository permissions, retain administrator access to a repository that has already been detached [3].

The vulnerability is present in product:

  • GitHub Enterprise Server;

CVSS: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N

More information:

The vulnerability was publicly disclosed 20. 3. 2024.

GitHub - CSRF (CVE-2024-2748)
CVSS 4.3 (Medium)

An unauthenticated remote attacker can, through a GraphQL mutation, carry out Cross-Site Request Forgery (CSRF) attacks and perform unauthorized actions on behalf of a user [4].

The vulnerability is present in product:

  • GitHub Enterprise Server; ==3.12.0

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

More information:

The vulnerability was publicly disclosed 20. 3. 2024.

By CESNET, z.s.p.o. Michaela Jarošová on 22. 3. 2024.

CESNET, z.s.p.o. Logo