Vulnerabilities > Github > Enterprise Server > 3.13.0

DATE CVE VULNERABILITY TITLE RISK
2024-07-16 CVE-2024-5566 Unspecified vulnerability in Github Enterprise Server
An improper privilege management vulnerability allowed users to migrate private repositories without having appropriate scopes defined on the related Personal Access Token.
network
low complexity
github
6.5
2024-07-16 CVE-2024-5795 Resource Exhaustion vulnerability in Github Enterprise Server
A Denial of Service vulnerability was identified in GitHub Enterprise Server that allowed an attacker to cause unbounded resource exhaustion by sending a large payload to the Git server.
network
low complexity
github CWE-400
6.5
2024-07-16 CVE-2024-5815 Cross-Site Request Forgery (CSRF) vulnerability in Github Enterprise Server
A Cross-Site Request Forgery vulnerability in GitHub Enterprise Server allowed write operations on a victim-owned repository by exploiting incorrect request types.
network
low complexity
github CWE-352
6.5
2024-07-16 CVE-2024-5816 Incorrect Authorization vulnerability in Github Enterprise Server
An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed a suspended GitHub App to retain access to the repository via a scoped user access token.
network
low complexity
github CWE-863
5.3
2024-07-16 CVE-2024-5817 Incorrect Authorization vulnerability in Github Enterprise Server
An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed read access to issue content via GitHub Projects.
network
low complexity
github CWE-863
6.5
2024-07-16 CVE-2024-6336 Unspecified vulnerability in Github Enterprise Server
A Security Misconfiguration vulnerability in GitHub Enterprise Server allowed sensitive information disclosure to unauthorized users in GitHub Enterprise Server by exploiting organization ruleset feature.
network
low complexity
github
5.3
2024-07-16 CVE-2024-6395 Unspecified vulnerability in Github Enterprise Server
An exposure of sensitive information vulnerability in GitHub Enterprise Server would allow an attacker to enumerate the names of private repositories that utilize deploy keys.
network
low complexity
github
5.3