Github Enterprise Server

Privilege Management vulnerability was identified in GitHub Enterprise Server that allowed GitHub Apps to grant themselves write access

Insufficient HTML Sanitization Allows User-Controlled DOM Elements to Overwrite Server-Initialized Data Islands and Trigger Unintended Server-Side POST Requests

Markdown math block sanitization bypass allows privilege escalation and unauthorized workflow triggers

Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise Server that allowed rendering of malicious HTML

Insufficient Entropy in GitHub Enterprise Server Management Console Invitation Token

Server-side request forgery vulnerability in GitHub Enterprise Server Manage API leaked a replayable gateway-agent bearer token

Sensitive Information in Log File in GitHub Enterprise Server

Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Management Console

Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

Remote Code Execution in GitHub Enterprise Server Allowed Administrators to gain SSH access to the appliance

Improper Privilege Management was identified in GitHub Enterprise Server that allowed privilege escalation in the Management Console

Race condition vulnerability was identified in GitHub Enterprise Server that allowed remote code execution

Denial of Service vulnerability was identified in GitHub Enterprise Server that allowed resource exhaustion

Improper authentication vulnerability in GitHub Enterprise Server leading to modification of secret gists

A Server-Side Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed an attacker with the Site Administrator role to gain arbitrary code execution capability on the GitHub Enterprise Server instance. Exploitation required authenticated access to GitHub Enterprise Server as a user with the Site Administrator role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.13 and was fixed in versions 3.12.5, 3.11.11, 3.10.13, and 3.9.16. This vulnerability was reported via the GitHub Bug Bounty program.

Improper Authentication in GitHub Enterprise Server leading to Authentication Bypass for Public Repository Data

Denial of service vulnerability in GitHub Enterprise Server allowed unauthenticated service disruption via deeply nested request parameters

Pre-Receive Hook Path Collision Vulnerability in GitHub Enterprise Server Allowing Privilege Escalation

Denial of service vulnerability in GitHub Enterprise Server allowed service disruption via unauthenticated API endpoint

Improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed cross-site scripting via task list content and enabled arbitrary HTML injection

Stored cross-site scripting vulnerability in GitHub Enterprise Server allowed HTML attribute injection via the Markdown rendering pipeline

Pre-Receive Hook Remote Code Execution vulnerability was identified in GitHub Enterprise Server that allowing Privilege Escalation

Incorrect authorization in GitHub Enterprise Server token generation leading to full admin access

Sensitive Information in Log File in GitHub Enterprise Server

Repository administrator can bypass organization's ruleset using deploy keys

Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling

Improper Authorization in GitHub Enterprise Server allowed unauthorized workflow execution

Code Injection Vulnerability in GitHub Enterprise Server Allows Arbitrary Code Execution via Message Handling

Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed unauthorized merging of pull requests

Server-Side Request Forgery in GitHub Enterprise Server via Advisory Package URL Endpoint

Incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed read-only access

Race Condition allows Administrative Access on Organization Repositories

Improper authorization allows persistent access in GitHub Enterprise Server

Security misconfiguration was identified in GitHub Enterprise Server that allowed sensitive data exposure

Path traversal in GitHub Enterprise Server leading to arbitrary file reading when building a GitHub Pages site

Cross Site Request Forgery was identified in GitHub Enterprise Server that allowed write in a user owned repository

Improper access control in GitHub Enterprise Server leading to unauthorized read access to private repository metadata

Unsafe configuration options in GitHub Pages leading to path traversal on GitHub Enterprise Server

Path traversal in GitHub Enterprise Server hosted Pages leads to unauthorized file read access

Path traversal vulnerability in GitHub Enterprise Server that allowed arbitrary file read with a specially crafted GitHub Pages artifact upload