GitHub Enterprise Server 3.10.0
Approved changes feed: RSS · Atom
cpe:2.3:a:github:enterprise_server:3.10.0:*:*:*:*:*:*:*
part: a version: 3.10.0 update: *
| Vendor | Github (b5027ca2-9bb9-532e-8779-8399b14c3e3b) |
|---|---|
| Product | Enterprise Server (be636c4e-08d4-5a4d-9a30-88523db2c7b7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-3646 |
vulnerable | 2026-06-03 14:56:31.563780 |
Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Management Console
HIGH (8)
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the instance when configuring the chat integration. Exploitation of this vulnerability required access to the GitHub Enterprise Server instance and access to the Management Console with the editor role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12 and was fixed in versions 3.12.2, 3.11.8, 3.10.10, and 3.9.13. This vulnerability was reported via the GitHub Bug Bounty program.
Published: 2024-04-19T14:21:47.779Z
Updated: 2024-08-01T20:20:00.135Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2440 |
vulnerable | 2026-06-03 14:55:29.248835 |
Race Condition was identified in GitHub Enterprise Server that allowed maintaining admin permissions
MEDIUM (5.5)
A race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on a detached repository by making a GraphQL mutation to alter repository permissions while the repository is detached. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.13 and was fixed in versions 3.9.13, 3.10.10, 3.11.8 and 3.12.1. This vulnerability was reported via the GitHub Bug Bounty program.
Published: 2024-04-19T17:02:29.144Z
Updated: 2024-08-01T19:11:53.576Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23766 |
vulnerable | 2026-06-03 14:49:28.619698 |
Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling
MEDIUM (4.5)
An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff in a re-opened Pull Request. To do so, an attacker would need write access to the repository. This vulnerability affected all versions of GitHub Enterprise Server and was fixed in versions 3.6.17, 3.7.15, 3.8.8, 3.9.3, and 3.10.1. This vulnerability was reported via the GitHub Bug Bounty program.
Published: 2023-09-22T14:18:49.735Z
Updated: 2024-09-24T14:29:38.315Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.