Lucene search
PRIOn knowledge basePRION:CVE-2024-1084HistoryFeb 13, 2024 - 7:15 p.m.
Cross site scripting
2024-02-1319:15:00
PRIOn knowledge base
www.prio-n.com
4
cross-site scripting
github enterprise server
xss vulnerability
tag name pattern field
account changes
csp bypass
csrf tokens
nvd
bug bounty program
Cross-site Scripting in the tag name pattern field in the tag protections UI in GitHub Enterprise Server allows a malicious website that requires user interaction and social engineering to make changes to a user account via CSP bypass with created CSRF tokens. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12 and was fixed in all versions of 3.11.5, 3.10.7, 3.9.10, and 3.8.15. This vulnerability was reported via the GitHub Bug Bounty program.
Related
nvd
nvd
CVE-2024-1084
2024-02-13 19:15:09
cve
cve
CVE-2024-1084
2024-02-13 19:15:09
hackerone
hackerone
cvelist
cvelist
CVE-2024-1084
2024-02-13 18:44:05