Lucene search
PRIOn knowledge basePRION:CVE-2023-6804HistoryDec 21, 2023 - 9:15 p.m.
Input validation
2023-12-2121:15:00
PRIOn knowledge base
www.prio-n.com
3
github
enterprise server
privilege management
arbitrary workflows
scoped pat
vulnerability
nvd
Improper privilege management allowed arbitrary workflows to be committed and run using an improperly scoped PAT. To exploit this, a workflow must have already existed in the target repo. This vulnerability affected all versions of GitHub Enterprise Server since 3.8 and was fixed in version 3.8.12, 3.9.7, 3.10.4, and 3.11.1.
