Report feedback

An authenticated remote attacker with the editor role in the management console can gain administrative SSH access to the instance while configuring the chat integration [2].

The vulnerability is present in product:

• GitHub Enterprise Server; <3.12.2; <3.11.8; <3.10.10; <3.9.13

CVSS: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

More information:

• CVE-2024-3646 at cve.org, NVD
• CWE-20 at cwe.mitre.org

The vulnerability was publicly disclosed 18. 4. 2024.

An authenticated remote attacker with the editor role in the management console can gain SSH access to the instance by using a malicious command while configuring artifact, log and migration storage [3].

The vulnerability is present in product:

• GitHub Enterprise Server; <3.12.2; <3.11.8; <3.10.10; <3.9.13

CVSS: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

More information:

• CVE-2024-3684 at cve.org, NVD
• CWE-88 at cwe.mitre.org

The vulnerability was publicly disclosed 18. 4. 2024.

An authenticated remote attacker with a deploy key for an organization-owned repository can bypass a ruleset defined by the organization administrator [4].

The vulnerability is present in product:

• GitHub Enterprise Server; <3.12.2; <3.11.8; <3.10.10; <3.9.13

CVSS: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H

More information:

• CVE-2024-3470 at cve.org, NVD
• CWE-269 at cwe.mitre.org

The vulnerability was publicly disclosed 18. 4. 2024.

An authenticated remote attacker can retain administrator access to a detached repository due to a "race condition" by performing a GraphQL mutation that changes repository permissions while the repository is detached [5].

The vulnerability is present in product:

• GitHub Enterprise Server; <3.12.2; <3.11.8; <3.10.10; <3.9.13

CVSS: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:L

More information:

• CVE-2024-2440 at cve.org, NVD
• CWE-367 at cwe.mitre.org

The vulnerability was publicly disclosed 18. 4. 2024.