CVE-2022-46255

CVE-2022-46255 affects GitHub Enterprise Server 3.7.0 and enables remote code execution due to improper limitation of a pathname to a restricted directory. The root cause was an arbitrary file overwrite risk during content unpacking; a fix was added in 3.7.1 by validating that the working directo...