Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: GitHub Enterprise Server 2.20.24, 2.21.15 and 2 more versions Clear all filters
TI-2021-05724 CVE-2021-22863 · GHSA-8p87-5p57-jm4v

Improper authorization in GitHub Enterprise Server

Priority LOW 37

An improper access control vulnerability was identified in the GitHub Enterprise Server GraphQL API that allowed authenticated users of the instance to modify the maintainer collaboration permission of a pull request wit…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01003 Published 2021-03-03 Fixed in 2.20.24, 2.21.15 +2 CWE-285
TI-2021-05722 CVE-2021-22861 · GHSA-x87g-4c45-mvv5

Improper access control in GitHub Enterprise Server leading to unauthorized write access to forkable repositories

Priority LOW 31

An improper access control vulnerability was identified in GitHub Enterprise Server that allowed authenticated users of the instance to gain write access to unauthorized repositories via specifically crafted pull request…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00952 Published 2021-03-03 Fixed in 2.20.24, 2.21.15 +2 CWE-285