Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-51379
HistoryDec 21, 2023 - 9:15 p.m.

Authorization

2023-12-2121:15:00
PRIOn knowledge base
www.prio-n.com
3
incorrect authorization
github enterprise
issue comments
improperly scoped token
vulnerability
repository content
permissions
fixed version
nvd

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.0%

An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed issue comments to be updated with an improperly scoped token. This vulnerability did not allow unauthorized access to any repository content as it also required contents:write and issues:read permissions. This vulnerability affected all versions of GitHub Enterprise Server since 3.7 and was fixed in version 3.17.19, 3.8.12, 3.9.7, 3.10.4, and 3.11.1.

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.0%

Related for PRION:CVE-2023-51379