1091 matches found
CVE-2024-0507_CVE-2024-0200-github
소개 이 저장소에는 GitHub Enterprise 취약점 CVE-2024-0507 및 CVE-2024-0200에 대해 개발한 익스플로잇이 포함되어 있습니다. 전체 분석 글은 https://blog.convisoappsec.com/en/analysis-of-github-enterprise-vulnerabilities-cve-2024-0507-cve-2024-0200 에서 확인하세요. CVE-2024-0507 GitHub Enterprise Server의 관리 콘솔에서 코드 삽입을 통한 권한 상승 . CVE-2024-0200...
Exploit_CVE-2026-3854
ExploitCVE-2026-3854 CVE-2026-3854는 GitHub.com 및 GitHub Enterprise Server에서 발생하는 원격 코드 실행RCE 취약점입니다. 이 취약점은 다음과 같이 git push 명령어에 명령을 주입하여 악용될 수 있습니다: git push -o '' origin master 이 취약점의 악용 여부를 검토하려면 push 옵션에 ";"가 포함된 push 작업에 대해 /var/log/github-audit.log를 검토할 것을 권장합니다. 취약한 버전: GitHub Enterprise...
CVE-2026-96890
A Server-Side Request Forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed a repository contributor to cause the appliance to issue requests to attacker-controlled internal hosts, which could be chained to achieve remote code execution on the appliance. The secret...
CVE-2026-103620
A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository collaborator with write access to delete the current default branch through the GraphQL API and cause an attacker-controlled branch to become the new default. In repositories that required...
CVE-2026-96890
A Server-Side Request Forgery (SSRF) vulnerability exists in GitHub Enterprise Server (versions 3.20, 3.21, and 3.22). The flaw stems from the secret scanning validator for GCP service account credentials , which trusted the token endpoint embedded in a committed credential and issued requests wi...
EUVD-2026-93667
A Server-Side Request Forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed a repository contributor to cause the appliance to issue requests to attacker-controlled internal hosts, which could be chained to achieve remote code execution on the appliance. The secret...
CVE-2026-96890 Server-Side Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed requests to attacker-controlled internal hosts
A Server-Side Request Forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed a repository contributor to cause the appliance to issue requests to attacker-controlled internal hosts, which could be chained to achieve remote code execution on the appliance. The secret...
CVE-2026-96890 Server-Side Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed requests to attacker-controlled internal hosts
A Server-Side Request Forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed a repository contributor to cause the appliance to issue requests to attacker-controlled internal hosts, which could be chained to achieve remote code execution on the appliance. The secret...
EUVD-2026-93666
A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository collaborator with write access to delete the current default branch through the GraphQL API and cause an attacker-controlled branch to become the new default. In repositories that required...
CVE-2026-103620 Missing authorization in GitHub Enterprise Server allowed repository writers to replace default branches via GraphQL
A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository collaborator with write access to delete the current default branch through the GraphQL API and cause an attacker-controlled branch to become the new default. In repositories that required...
CVE-2026-103620 Missing authorization in GitHub Enterprise Server allowed repository writers to replace default branches via GraphQL
A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository collaborator with write access to delete the current default branch through the GraphQL API and cause an attacker-controlled branch to become the new default. In repositories that required...
CVE-2026-103620
A missing authorization vulnerability in GitHub Enterprise Server allows repository collaborators with write access to delete the current default branch using the GraphQL API . This flaw enables an attacker to set an attacker-controlled branch as the new default. In repositories requiring pull-re...
PT-2026-107128
A Server-Side Request Forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed a repository contributor to cause the appliance to issue requests to attacker-controlled internal hosts, which could be chained to achieve remote code execution on the appliance. The secret...
CVE-2026-96890: Server-Side Request Forgery (SSRF)
A Server-Side Request Forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed a repository contributor to cause the appliance to issue requests to attacker-controlled internal hosts, which could be chained to achieve remote code execution on the appliance. The secret...
PT-2026-107111
A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository collaborator with write access to delete the current default branch through the GraphQL API and cause an attacker-controlled branch to become the new default. In repositories that required...
ghe-push-option-rce-scanner
CVE-2026-3854 — 푸시 옵션 인젝션을 통한 GitHub Enterprise Server RCE 개요 GHE에서 푸시 옵션 값에 대한 부적절한 중화. 푸시 접근 권한이 있는 공격자가 인스턴스에서 RCE를 달성할 수 있습니다. 필드| 값 ---|--- CVE| CVE-2026-3854 심각도| CRITICAL 제품| GitHub Enterprise Server CISA KEV| 2026-03-10 공격 유형| 푸시 옵션 인젝션을 통한 RCE 인증 필요| 없음 영향을 받는 버전 상태| 버전 ---|--- ❌ 취약|...
CVE-2026-77912
A stored cross-site scripting XSS vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to inject arbitrary HTML attributes into rendered Markdown because the Markdown rendering pipeline rewrote quote characters in already-sanitized HTML without...
CVE-2026-77987
A server-side request forgery SSRF vulnerability was identified in the notebook viewer of GitHub Enterprise Server. The notebook viewer validated the scheme and host of a user-supplied URL but did not validate the port, allowing requests to be directed to internal services listening on other port...
CVE-2026-75101
An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed any authenticated user of the instance to read the raw diff or patch of pull requests in private repositories without authorization. Access tokens for raw pull request diffs and patches were scoped to th...
EUVD-2026-84874
An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed any authenticated user of the instance to read the raw diff or patch of pull requests in private repositories without authorization. Access tokens for raw pull request diffs and patches were scoped to th...