Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Priority MEDIUM 46

A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance via nomad templates when confi…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02339 Published 2024-02-13 Fixed in 3.8.15, 3.9.10 +3 CWE-20
Priority MEDIUM 46

A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance via nomad templates when confi…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02632 Published 2024-02-13 Fixed in 3.8.15, 3.9.10 +3 CWE-20
Priority MEDIUM 46

A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance when configuring SAML settings…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02275 Published 2024-02-13 Fixed in 3.8.15, 3.9.10 +3 CWE-20
Priority MEDIUM 46

A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance when setting the username and…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02275 Published 2024-02-13 Fixed in 3.8.15, 3.9.10 +3 CWE-20
Priority MEDIUM 46

A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance via the actions-console docker…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02363 Published 2024-02-13 Fixed in 3.8.15, 3.9.10 +3 CWE-20
Priority MEDIUM 40

A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance via the `syslog-ng` configurat…

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.0172 Published 2024-02-13 Fixed in 3.8.15, 3.9.10 +3 CWE-20
TI-2024-01003 CVE-2024-1082 · GHSA-54qf-h346-xgmg

Path traversal in GitHub Enterprise Server

Priority LOW 30

A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an attacker to gain unauthorized read permission to files by deploying arbitrary symbolic links to a GitHub Pages site with a special…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0077 Published 2024-02-13 Fixed in 3.8.15, 3.9.10 +3 CWE-22