Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/11/11 11:42 p.m.12 views

CVE-2025-11578

A privilege escalation vulnerability was identified in GitHub Enterprise Server that allowed an authenticated Enterprise admin to gain root SSH access to the appliance by exploiting a symlink escape in pre-receive hook environments. By crafting a malicious repository and environment, an attacker...

7.5CVSS7.3AI score0.00584EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/11 12:30 a.m.5 views

EUVD-2025-50831

A privilege escalation vulnerability was identified in GitHub Enterprise Server that allowed an authenticated Enterprise admin to gain root SSH access to the appliance by exploiting a symlink escape in pre-receive hook environments. By crafting a malicious repository and environment, an attacker...

7.5CVSS6.8AI score0.00584EPSS
Exploits0References6
OSV
OSV
added 2025/11/10 11:15 p.m.4 views

CVE-2025-11578

A privilege escalation vulnerability was identified in GitHub Enterprise Server that allowed an authenticated Enterprise admin to gain root SSH access to the appliance by exploiting a symlink escape in pre-receive hook environments. By crafting a malicious repository and environment, an attacker...

7.2CVSS5.9AI score0.00584EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/11/10 12:0 a.m.7 views

PT-2025-46217

Name of the Vulnerable Software and Affected Versions GitHub Enterprise Server versions prior to 3.19 GitHub Enterprise Server versions 3.14.19 GitHub Enterprise Server versions 3.15.14 GitHub Enterprise Server versions 3.16.10 GitHub Enterprise Server versions 3.17.7 GitHub Enterprise Server...

7.5CVSS6.8AI score0.00584EPSS
Exploits0References8
NVD
NVD
added 2025/04/17 11:15 p.m.33 views

CVE-2025-3509

A Remote Code Execution RCE vulnerability was identified in GitHub Enterprise Server that allowed attackers to execute arbitrary code by exploiting the pre-receive hook functionality, potentially leading to privilege escalation and system compromise. The vulnerability involves using dynamically...

7.2CVSS0.01209EPSS
Exploits0References5
OSV
OSV
added 2025/04/17 11:15 p.m.4 views

CVE-2025-3509

A Remote Code Execution RCE vulnerability was identified in GitHub Enterprise Server that allowed attackers to execute arbitrary code by exploiting the pre-receive hook functionality, potentially leading to privilege escalation and system compromise. The vulnerability involves using dynamically...

7.2CVSS6.2AI score
Exploits0References5
CNNVD
CNNVD
added 2025/04/17 12:0 a.m.3 views

GitHub Enterprise Server 安全漏洞

GitHub Enterprise Server is an open source application from GitHub in the United States. It provides a platform for setting up your own GitHub instance as a virtual appliance, thus providing a scalable, easy-to-manage platform. A security vulnerability exists in GitHub Enterprise Server versions...

7.2CVSS8.1AI score0.01209EPSS
Exploits0References10
Rows per page
Query Builder