Lucene search
PRIOn knowledge basePRION:CVE-2024-0200HistoryJan 16, 2024 - 7:15 p.m.
Design/Logic Flaw
2024-01-1619:15:00
PRIOn knowledge base
www.prio-n.com
7
github
reflection vulnerability
remote code execution
user-controlled methods
security patch
bug bounty program
An unsafe reflection vulnerability was identified in GitHub Enterprise Server that could lead to reflection injection. This vulnerability could lead to the execution of user-controlled methods and remote code execution. To exploit this bug, an actor would need to be logged into an account on the GHES instance with the organization owner role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12 and was fixed in versions 3.8.13, 3.9.8, 3.10.5, and 3.11.3. This vulnerability was reported via the GitHub Bug Bounty program.
Related
nvd
nvd
CVE-2024-0200
2024-01-16 19:15:08
cvelist
cvelist
cve
cve
CVE-2024-0200
2024-01-16 19:15:08
thn
thn
GitHub Rotates Keys After High-Severity Vulnerability Exposes Credentials
2024-01-17 07:41:00
nuclei
nuclei
Github Enterprise Authenticated Remote Code Execution
2024-05-09 11:09:50