Vulnerabilities > Github > Enterprise Server > 3.6.4

DATE CVE VULNERABILITY TITLE RISK
2022-12-14 CVE-2022-23741 Incorrect Authorization vulnerability in Github Enterprise Server
An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a scoped user-to-server token to escalate to full admin/owner privileges.
network
low complexity
github CWE-863
7.2
7.2
2022-12-14 CVE-2022-46256 Path Traversal vulnerability in Github Enterprise Server
A path traversal vulnerability was identified in GitHub Enterprise Server that allowed remote code execution when building a GitHub Pages site.
network
low complexity
github CWE-22
8.8
8.8