CVSS: 8.1EPSS: 0%CPEs: 4EXPL: 0CVE-2021-22863 – Improper access control in GitHub Enterprise Server leading to unauthorized changes to maintainer permissions on pull requests
https://notcve.org/view.php?id=CVE-2021-22863
03 Mar 2021 — An improper access control vulnerability was identified in the GitHub Enterprise Server GraphQL API that allowed authenticated users of the instance to modify the maintainer collaboration permission of a pull request without proper authorization. By exploiting this vulnerability, an attacker would be able to gain access to head branches of pull requests opened on repositories of which they are a maintainer. Forking is disabled by default for organization owned private repositories and would prevent this vul... • https://docs.github.com/en/enterprise-server%402.20/admin/release-notes#2.20.24 • CWE-285: Improper Authorization •
CVSS: 6.5EPSS: 0%CPEs: 3EXPL: 0CVE-2021-22862 – Improper access control in GitHub Enterprise Server leading to the disclosure of Actions secrets to forks
https://notcve.org/view.php?id=CVE-2021-22862
03 Mar 2021 — An improper access control vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user with the ability to fork a repository to disclose Actions secrets for the parent repository of the fork. This vulnerability existed due to a flaw that allowed the base reference of a pull request to be updated to point to an arbitrary SHA or another pull request outside of the fork repository. By establishing this incorrect reference in a PR, the restrictions that limit the Actions secrets ... • https://docs.github.com/en/enterprise-server%403.0/admin/release-notes#3.0.1 • CWE-285: Improper Authorization •
CVSS: 6.5EPSS: 0%CPEs: 4EXPL: 0CVE-2021-22861 – Improper access control in GitHub Enterprise Server leading to unauthorized write access to forkable repositories
https://notcve.org/view.php?id=CVE-2021-22861
03 Mar 2021 — An improper access control vulnerability was identified in GitHub Enterprise Server that allowed authenticated users of the instance to gain write access to unauthorized repositories via specifically crafted pull requests and REST API requests. An attacker would need to be able to fork the targeted repository, a setting that is disabled by default for organization owned private repositories. Branch protections such as required pull request reviews or status checks would prevent unauthorized commits from bei... • https://docs.github.com/en/enterprise-server%402.20/admin/release-notes#2.20.24 • CWE-285: Improper Authorization •
CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 0CVE-2012-2055
https://notcve.org/view.php?id=CVE-2012-2055
04 Apr 2012 — GitHub Enterprise before 20120304 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set the public_key[user_id] value via a modified URL for the public-key update form, related to a "mass assignment" vulnerability. GitHub Enterprise antes de v20120304 no restringe debidamente el uso de un hash para proporcionar los valores para un modelo de atributos, lo que permite a atacantes remotos establecer el valor public_key [user_id] a través d... • http://homakov.blogspot.com/2012/03/how-to.html • CWE-913: Improper Control of Dynamically-Managed Code Resources •