GitHub GitHub Enterprise Server

• CVE-2025-6600 Medium 6.3 GitHub Enterprise Server Information Disclosure Vulnerability Exposes Private Repository Names via Search API 0.3%
• CVE-2025-3246 High 8.6 Markdown math block sanitization bypass allows privilege escalation and unauthorized workflow triggers 0.3%
• CVE-2024-9539 Medium 5.7 An information disclosure vulnerability was identified in GitHub Enterprise Server via attacker uploaded asset URL allowing the attacker to retrieve metadata information of a user who clicks on the UR 0.6%
• CVE-2024-8263 Medium 6.2 An improper privilege management vulnerability allowed arbitrary workflows to be committed using an improperly scoped PAT through the use of nested tags. This vulnerability affected all versions of Gi 0.4%
• CVE-2024-8770 Medium 5.8 A Cross-Site Scripting (XSS) vulnerability was identified in the repository transfer feature of GitHub Enterprise Server, which allows attackers to steal sensitive user information via social engineer 0.4%
• CVE-2024-6800 Critical 9.5 An XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when using SAML authentication with specific identity providers utilizing publicly exposed signed federation meta 1.5%
• CVE-2024-6337 Medium 5.9 Incorrect Authorization allows read access to issues in GitHub Enterprise Server 0.7%
• CVE-2024-7711 Medium 5.3 An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server, allowing an attacker to update the title, assignees, and labels of any issue inside a public repository. This was o 0.5%
• CVE-2024-6395 Medium 6.3 GitHub Enterprise Server Information Disclosure Vulnerability Exposes Private Repository Names via Deploy Keys 0.5%
• CVE-2024-6336 Medium 6.9 Security misconfiguration was identified in GitHub Enterprise Server that allowed sensitive data exposure 0.4%
• CVE-2024-5817 Medium 5.9 Improper authorization allows read access to issue content in GitHub Enterprise Server 0.5%
• CVE-2024-5816 Medium 6.9 Improper authorization allows persistent access in GitHub Enterprise Server 0.5%
• CVE-2024-5815 Medium 6.8 Cross Site Request Forgery was identified in GitHub Enterprise Server that allowed write in a user owned repository 0.2%
• CVE-2024-5795 High 7.7 Denial of Service vulnerability was identified in GitHub Enterprise Server that allowed resource exhaustion 0.6%
• CVE-2024-5566 Medium 5.8 Improper Privilege Management allows for access to unauthorized repository content during migration 0.5%
• CVE-2024-5746 High 7.6 A Server-Side Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed an attacker with the Site Administrator role to gain arbitrary code execution capability on the GitH 0.9%
• CVE-2024-2443 Critical 9.1 Improper input validation vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Management Console 2.1%
• CVE-2022-46257 Unrated Information disclosure in GitHub Enterprise Server leading to unauthorized viewing of private repository names 0.6%
• CVE-2023-22380 Medium 6.5 Path traversal in GitHub Enterprise Server leading to arbitrary file reading when building a GitHub Pages site 0.7%
• CVE-2022-23739 Critical 9.8 Incorrect authorization check in GitHub Enterprise Server leading to escalation of privileges in GraphQL API requests from GitHub Apps using scoped user-to-server tokens 1.3%
• CVE-2022-46258 Medium 6.5 Incorrect Authorization in GitHub Enterprise Server leads to Action Workflow modifications without Workflow Scope 0.6%
• CVE-2022-23741 High 7.2 Incorrect authorization in GitHub Enterprise Server token generation leading to full admin access 1.2%
• CVE-2022-46255 Critical 9.8 Improper Limitation of a Pathname to a Restricted Directory in GitHub Enterprise Server leading to RCE 1.6%
• CVE-2022-46256 High 8.8 Path traversal in GitHub Enterprise Server leading to remote code execution in GitHub Pages 2.1%
• CVE-2022-23737 Medium 6.5 Improper Privilege Management in GitHub Enterprise Server leading to page creation and deletion 0.8%
• CVE-2022-23740 High 8.8 Improper Neutralization of Argument Delimiters in a Command in GitHub Enterprise Server leading to Remote Code Execution 1.2%
• CVE-2022-23738 Medium 5.7 Incomplete cache verification issue in GitHub Enterprise Server leading to exposure of private repo files 0.8%
• CVE-2022-23734 High 8.8 Deserialization of Untrusted Data vulnerability in GitHub Enterprise Server leading to Remote Code Execution 2.8%
• CVE-2022-23733 Unrated Stored XSS vulnerability in GitHub Enterprise Server leading to injection of arbitrary attributes 0.6%
• CVE-2022-23732 Unrated Path traversal in GitHub Enterprise Server management console leading to a bypass of CSRF protections 1.7%
• CVE-2021-41599 Unrated Improper control flow in GitHub Enterprise Server hosted Pages leads to remote code execution 2.2%
• CVE-2021-41598 Unrated UI misrepresentation of granted permissions in GitHub Enterprise Server leading to unauthorized access to user 1.2%
• CVE-2021-22870 Unrated Path traversal in GitHub Enterprise Server hosted Pages leads to unauthorized file read access 1.1%
• CVE-2021-22868 Unrated Unsafe configuration options in GitHub Pages leading to path traversal on GitHub Enterprise Server 0.9%
• CVE-2021-22869 Unrated Improper access control in GitHub Enterprise Server allows self-hosted runners to execute outside their control group 1.2%
• CVE-2021-22867 Unrated Unsafe configuration options in GitHub Pages leading to path traversal on GitHub Enterprise Server 1.2%
• CVE-2021-22866 Unrated UI misrepresentation of granted permissions in GitHub Enterprise Server leading to unauthorized access to user resources 1.0%
• CVE-2021-22865 Unrated Improper access control in GitHub Enterprise Server leading to unauthorized read access to private repository metadata 1.4%
• CVE-2021-22864 Unrated Unsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise Server 2.6%
• CVE-2021-22863 Unrated Improper access control in GitHub Enterprise Server leading to unauthorized changes to maintainer permissions on pull requests 1.0%
• CVE-2021-22862 Unrated Improper access control in GitHub Enterprise Server leading to the disclosure of Actions secrets to forks 0.8%
• CVE-2021-22861 Unrated Improper access control in GitHub Enterprise Server leading to unauthorized write access to forkable repositories 1.0%
• CVE-2020-10519 Unrated Unsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise Server 3.1%
• CVE-2020-10517 Unrated Improper access control in GitHub Enterprise Server leading to the enumeration of private repository names 1.1%
• CVE-2020-10518 Unrated Unsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise Server 3.7%
• CVE-2020-10516 Unrated Improper access control in GitHub Enterprise Server leading to privilege escalation of organization member 1.6%