CVSS: 8.7EPSS: 0%CPEs: 5EXPL: 0CVE-2024-8810 – Privilege Management vulnerability was identified in GitHub Enterprise Server that allowed GitHub Apps to grant themselves write access
https://notcve.org/view.php?id=CVE-2024-8810
A GitHub App installed in organizations could upgrade some permissions from read to write access without approval from an organization administrator. An attacker would require an account with administrator access to install a malicious GitHub App. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.14 and was fixed in versions 3.14.1, 3.13.4, 3.12.9, 3.11.15, and 3.10.17. This vulnerability was reported via the GitHub Bug Bounty program. • https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.17 https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.15 https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.12.9 https://docs.github.com/en/enterprise-server@3.13/admin/release-notes#3.13.4 https://docs.github.com/en/enterprise-server@3.14/admin/release-notes#3.14.1 • CWE-269: Improper Privilege Management •
CVSS: 8.7EPSS: 0%CPEs: 4EXPL: 0CVE-2024-10007 – Pre-Receive Hook Path Collision Vulnerability in GitHub Enterprise Server Allowing Privilege Escalation
https://notcve.org/view.php?id=CVE-2024-10007
A path collision and arbitrary code execution vulnerability was identified in GitHub Enterprise Server that allowed container escape to escalate to root via ghe-firejail path. Exploitation of this vulnerability requires Enterprise Administrator access to the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise prior to 3.15 and was fixed in versions 3.14.3, 3.13.6, 3.12.11, and 3.11.17. This vulnerability was reported via the GitHub Bug Bounty program. • https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.17 https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.12.11 https://docs.github.com/en/enterprise-server@3.13/admin/release-notes#3.13.6 https://docs.github.com/en/enterprise-server@3.14/admin/release-notes#3.14.3 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •
CVSS: 9.5EPSS: 0%CPEs: 4EXPL: 0CVE-2024-9487 – An Improper Verification of Cryptographic Signature vulnerability was identified in GitHub Enterprise Server that allowed SAML SSO authentication to be bypassed when the encrypted assertions feature was enabled
https://notcve.org/view.php?id=CVE-2024-9487
An improper verification of cryptographic signature vulnerability was identified in GitHub Enterprise Server that allowed SAML SSO authentication to be bypassed resulting in unauthorized provisioning of users and access to the instance. Exploitation required the encrypted assertions feature to be enabled, and the attacker would require direct network access as well as a signed SAML response or metadata document. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.15 and was fixed in versions 3.11.16, 3.12.10, 3.13.5, and 3.14.2. This vulnerability was reported via the GitHub Bug Bounty program. • https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.16 https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.12.10 https://docs.github.com/en/enterprise-server@3.13/admin/release-notes#3.13.5 https://docs.github.com/en/enterprise-server@3.14/admin/release-notes#3.14.2 • CWE-347: Improper Verification of Cryptographic Signature •
CVSS: 6.2EPSS: 0%CPEs: 5EXPL: 0CVE-2024-8263
https://notcve.org/view.php?id=CVE-2024-8263
An improper privilege management vulnerability allowed arbitrary workflows to be committed using an improperly scoped PAT through the use of nested tags. This vulnerability affected all versions of GitHub Enterprise Server and was fixed in version 3.10.17, 3.11.15, 3.12.9, 3.13.4, and 3.14.1. This vulnerability was reported via the GitHub Bug Bounty program. • https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.17 https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.15 https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.12.9 https://docs.github.com/en/enterprise-server@3.13/admin/release-notes#3.13.4 https://docs.github.com/en/enterprise-server@3.14/admin/release-notes#3.14.1 • CWE-269: Improper Privilege Management •
CVSS: 5.8EPSS: 0%CPEs: 5EXPL: 0CVE-2024-8770
https://notcve.org/view.php?id=CVE-2024-8770
A Cross-Site Scripting (XSS) vulnerability was identified in the repository transfer feature of GitHub Enterprise Server, which allows attackers to steal sensitive user information via social engineering. This vulnerability affected all versions of GitHub Enterprise Server and was fixed in version 3.10.17, 3.11.15, 3.12.9, 3.13.4, and 3.14.1. This vulnerability was reported via the GitHub Bug Bounty program. • https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.17 https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.15 https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.12.9 https://docs.github.com/en/enterprise-server@3.13/admin/release-notes#3.13.4 https://docs.github.com/en/enterprise-server@3.14/admin/release-notes#3.14.1 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •