GI
Product
Github
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 3Low 0
Watch
Add Github to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-10516 | 9.8 | Jun 3 | An improper access control vulnerability was identified in the GitHub Enterprise Server API that allowed an organization member to escalate permissions and gain access to… Affected: 2.18.0 before 2.18.20; 2.19.0 before 2.19.15; 2.20.0 before 2.20.9 |
| CVE-2017-18365 | 9.8 | Mar 28 | The Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that allows unauthenticated remote attackers to execute arbitrary code Affected: 2.8.0 before 2.8.7; 2.8.7 |
| CVE-2020-10519 | 8.8 | Mar 3 | A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site Affected: before 2.20.24; 2.21.0 before 2.21.15; 2.22.0 before 2.22.7 |
| CVE-2020-10518 | 8.8 | Aug 27 | A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site Affected: before 2.19.21; 2.20.0 before 2.20.15; 2.21.0 before 2.21.6 |
| CVE-2021-22863 | 8.1 | Mar 3 | An improper access control vulnerability was identified in the GitHub Enterprise Server GraphQL API that allowed authenticated users of the instance to modify the maintainer… Affected: 2.12.22 before 2.20.24; 2.21.0 before 2.21.15; 2.22.0 before 2.22.7; 3.0.0 before 3.0.1 |
| CVE-2012-2055 | 7.5 | Apr 5 | GitHub Enterprise before 20120304 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set the… Affected: before 20120304 |
| CVE-2021-22862 | 6.5 | Mar 3 | An improper access control vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user with the ability to fork a repository to disclose Actions… Affected: 3.0.0; 3.0.0; 3.0.0 |
| CVE-2021-22861 | 6.5 | Mar 3 | An improper access control vulnerability was identified in GitHub Enterprise Server that allowed authenticated users of the instance to gain write access to unauthorized… Affected: 2.4.21 before 2.20.24; 2.21.0 before 2.21.15; 2.22.0 before 2.22.7; 3.0.0 before 3.0.1 |
| CVE-2020-10517 | 4.3 | Aug 27 | An improper access control vulnerability was identified in GitHub Enterprise Server that allowed authenticated users of the instance to determine the names of unauthorized private… Affected: before 2.19.21; 2.20.0 before 2.20.15; 2.21.0 before 2.21.6 |
Showing 9