Priority MEDIUM 46
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance via nomad templates when confi…
CVSS 3.1CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.02339 · Published 2024-02-13 · Fixed in 3.8.15, 3.9.10 +3 CWE-20
Priority MEDIUM 46
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance via nomad templates when confi…
CVSS 3.1CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.02632 · Published 2024-02-13 · Fixed in 3.8.15, 3.9.10 +3 CWE-20
Priority MEDIUM 46
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance when configuring SAML settings…
CVSS 3.1CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.02275 · Published 2024-02-13 · Fixed in 3.8.15, 3.9.10 +3 CWE-20
Priority MEDIUM 46
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance when setting the username and…
CVSS 3.1CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.02275 · Published 2024-02-13 · Fixed in 3.8.15, 3.9.10 +3 CWE-20
Priority MEDIUM 46
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance via the actions-console docker…
CVSS 3.1CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.02363 · Published 2024-02-13 · Fixed in 3.8.15, 3.9.10 +3 CWE-20
Priority MEDIUM 40
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance via the `syslog-ng` configurat…
CVSS 3.1HIGH 8.0· Network · High privileges · No interaction · EPSS 0.0172 · Published 2024-02-13 · Fixed in 3.8.15, 3.9.10 +3 CWE-20
Priority LOW 30
A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an attacker to gain unauthorized read permission to files by deploying arbitrary symbolic links to a GitHub Pages site with a special…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0077 · Published 2024-02-13 · Fixed in 3.8.15, 3.9.10 +3 CWE-22