GitHub Enterprise Server 3.8.0
Approved changes feed: RSS · Atom
cpe:2.3:a:github:enterprise_server:3.8.0:*:*:*:*:*:*:*
part: a version: 3.8.0 update: *
| Vendor | Github (b5027ca2-9bb9-532e-8779-8399b14c3e3b) |
|---|---|
| Product | Enterprise Server (be636c4e-08d4-5a4d-9a30-88523db2c7b7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-23762 |
vulnerable | 2026-06-03 14:49:28.615265 |
Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling
MEDIUM (6.5)
An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff. To do so, an attacker would need write access to the repository and be able to correctly guess the target branch before it’s created by the code maintainer. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.9 and was fixed in versions 3.4.18, 3.5.15, 3.6.11, 3.7.8, and 3.8.1. This vulnerability was reported via the GitHub Bug Bounty program.
Published: 2023-04-07T18:41:52.689Z
Updated: 2025-02-10T15:20:05.018Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23761 |
vulnerable | 2026-06-03 14:49:28.614645 |
Improper authentication vulnerability in GitHub Enterprise Server leading to modification of secret gists
HIGH (7.7)
An improper authentication vulnerability was identified in GitHub Enterprise Server that allowed an unauthorized actor to modify other users' secret gists by authenticating through an SSH certificate authority. To do so, a user had to know the secret gist's URL. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.9 and was fixed in versions 3.4.18, 3.5.15, 3.6.11, 3.7.8, and 3.8.1. This vulnerability was reported via the GitHub Bug Bounty program.
Published: 2023-04-07T18:41:47.038Z
Updated: 2025-02-07T20:14:26.121Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.