Vulnerabilities

TI-2023-09565 CVE-2023-23762 · GHSA-jv37-6f69-j8gw

Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling

LOW 30

An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0064 Published 2023-04-07 Fixed in 3.8.1, 3.9.0 CWE-697

TI-2023-09564 CVE-2023-23761 · GHSA-q7wq-398w-6957

Improper authentication vulnerability in GitHub Enterprise Server leading to modification of secret gists

LOW 36

An improper authentication vulnerability was identified in GitHub Enterprise Server that allowed an unauthorized actor to modify other users' secret gists by authenticating through an SSH certificate authority.

CVSS 3.1HIGH 7.7 Network Low privileges User interaction EPSS 0.00462 Published 2023-04-07 Fixed in 3.8.1, 3.9.0 CWE-287

Vulnerabilities

Filters

Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling

Improper authentication vulnerability in GitHub Enterprise Server leading to modification of secret gists