Lucene search

[email protected]NVD:CVE-2023-6803

HistoryDec 21, 2023 - 9:15 p.m.

CVE-2023-6803

2023-12-2121:15:14

CWE-367

[email protected]

web.nvd.nist.gov

github

vulnerability

race condition

unauthorized collaborator

version 3.8.12

version 3.9.7

version 3.10.4

version 3.11.1

4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N

0.0004 Low

EPSS

Percentile

15.7%

JSON

A race condition in GitHub Enterprise Server allows an outside collaborator to be added while a repository is being transferred. This vulnerability affected all versions of GitHub Enterprise Server since 3.8 and was fixed in version 3.8.12, 3.9.7, 3.10.4, and 3.11.1.

Affected configurations

NVD

Node

githubenterprise_serverRange3.8.0–3.8.12

githubenterprise_serverRange3.9.0–3.9.7

githubenterprise_serverRange3.10.0–3.10.4

githubenterprise_serverMatch3.11.0

References

docs.github.com/en/[email protected]/admin/release-notes#3.10.4

docs.github.com/en/[email protected]/admin/release-notes#3.11.1

docs.github.com/en/[email protected]/admin/release-notes#3.8.12

docs.github.com/en/[email protected]/admin/release-notes#3.9.7

4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N

0.0004 Low

EPSS

Percentile

15.7%

JSON

Related for NVD:CVE-2023-6803

hackerone1 cvelist1 prion1 cve1