Lucene search
PRIOn knowledge basePRION:CVE-2022-23741HistoryDec 14, 2022 - 7:15 p.m.
Authorization
2022-12-1419:15:00
PRIOn knowledge base
www.prio-n.com
5
authorization
github
vulnerability
token escalation
admin privileges
bug bounty program
0.002 Low
EPSS
Percentile
55.5%
An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a scoped user-to-server token to escalate to full admin/owner privileges. An attacker would require an account with admin access to install a malicious GitHub App. This vulnerability was fixed in versions 3.3.17, 3.4.12, 3.5.9, and 3.6.5. This vulnerability was reported via the GitHub Bug Bounty program.
Related
hackerone
hackerone
cvelist
cvelist
nvd
nvd
CVE-2022-23741
2022-12-14 19:15:10
cve
cve
CVE-2022-23741
2022-12-14 19:15:10