GitHub Enterprise Server 3.11.0
Approved changes feed: RSS · Atom
cpe:2.3:a:github:enterprise_server:3.11.0:*:*:*:*:*:*:*
part: a version: 3.11.0 update: *
| Vendor | Github (b5027ca2-9bb9-532e-8779-8399b14c3e3b) |
|---|---|
| Product | Enterprise Server (be636c4e-08d4-5a4d-9a30-88523db2c7b7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-3646 |
vulnerable | 2026-06-08 06:43:51.063690 |
Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Management Console
HIGH (8)
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the instance when configuring the chat integration. Exploitation of this vulnerability required access to the GitHub Enterprise Server instance and access to the Management Console with the editor role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12 and was fixed in versions 3.12.2, 3.11.8, 3.10.10, and 3.9.13. This vulnerability was reported via the GitHub Bug Bounty program.
Published: 2024-04-19T14:21:47.779Z
Updated: 2024-08-01T20:20:00.135Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2440 |
vulnerable | 2026-06-08 06:33:31.119559 |
Race Condition was identified in GitHub Enterprise Server that allowed maintaining admin permissions
MEDIUM (5.5)
A race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on a detached repository by making a GraphQL mutation to alter repository permissions while the repository is detached. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.13 and was fixed in versions 3.9.13, 3.10.10, 3.11.8 and 3.12.1. This vulnerability was reported via the GitHub Bug Bounty program.
Published: 2024-04-19T17:02:29.144Z
Updated: 2024-08-01T19:11:53.576Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6847 |
vulnerable | 2026-06-08 06:21:56.044640 |
Improper Authentication in GitHub Enterprise Server leading to Authentication Bypass for Public Repository Data
HIGH (7.5)
An improper authentication vulnerability was identified in GitHub Enterprise Server that allowed a bypass of Private Mode by using a specially crafted API request. To exploit this vulnerability, an attacker would need network access to the Enterprise Server appliance configured in Private Mode. This vulnerability affected all versions of GitHub Enterprise Server since 3.9 and was fixed in version 3.9.7, 3.10.4, and 3.11.1. This vulnerability was reported via the GitHub Bug Bounty program.
Published: 2023-12-21T20:46:07.362Z
Updated: 2024-08-02T08:42:07.604Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6804 |
vulnerable | 2026-06-08 06:21:55.863285 |
Improper Privilege Management allows for arbitrary workflows to be run
MEDIUM (6.5)
Improper privilege management allowed arbitrary workflows to be committed and run using an improperly scoped PAT. To exploit this, a workflow must have already existed in the target repo. This vulnerability affected all versions of GitHub Enterprise Server since 3.8 and was fixed in version 3.8.12, 3.9.7, 3.10.4, and 3.11.1.
Published: 2023-12-21T20:45:34.098Z
Updated: 2024-11-27T18:41:27.790Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6803 |
vulnerable | 2026-06-08 06:21:55.862710 |
Race Condition allows Unauthorized Outside Collaborator
MEDIUM (5.8)
A race condition in GitHub Enterprise Server allows an outside collaborator to be added while a repository is being transferred. This vulnerability affected all versions of GitHub Enterprise Server since 3.8 and was fixed in version 3.8.12, 3.9.7, 3.10.4, and 3.11.1.
Published: 2023-12-21T20:45:27.233Z
Updated: 2024-08-02T08:42:07.752Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6802 |
vulnerable | 2026-06-08 06:21:55.862295 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6746 |
vulnerable | 2026-06-08 06:21:55.623418 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6690 |
vulnerable | 2026-06-08 06:21:55.300615 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51380 |
vulnerable | 2026-06-08 06:16:17.416246 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51379 |
vulnerable | 2026-06-08 06:16:17.415638 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46649 |
vulnerable | 2026-06-08 06:12:45.454857 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46648 |
vulnerable | 2026-06-08 06:12:45.454155 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.