An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed any authenticated user of the instance to read the raw diff or patch of pull requests in private reposito…
Info
Summary
An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed any authenticated user of the instance to read the raw diff or patch of pull requests in private repositories without authorization. Access tokens for raw pull request diffs and patches were scoped to the repository name and pull request number rather than to a globally unique repository identifier, so an attacker who created a repository and pull request matching a target's repository name and pull re…
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://docs.github.com/en/enterprise-server@3.17/admin/release-notes#3.17.21
- https://docs.github.com/en/enterprise-server@3.18/admin/release-notes#3.18.15
- https://docs.github.com/en/enterprise-server@3.19/admin/release-notes#3.19.12
- https://docs.github.com/en/enterprise-server@3.20/admin/release-notes#3.20.8
- https://docs.github.com/en/enterprise-server@3.21/admin/release-notes#3.21.6
Timeline
- nvd_ingest NVD