Vulnerabilities > Github > Github > 3.0.0

DATE CVE VULNERABILITY TITLE RISK
2021-03-03 CVE-2021-22863 Unspecified vulnerability in Github
An improper access control vulnerability was identified in the GitHub Enterprise Server GraphQL API that allowed authenticated users of the instance to modify the maintainer collaboration permission of a pull request without proper authorization.
network
low complexity
github
8.1
2021-03-03 CVE-2021-22862 Unspecified vulnerability in Github 3.0.0
An improper access control vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user with the ability to fork a repository to disclose Actions secrets for the parent repository of the fork.
network
low complexity
github
6.5
2021-03-03 CVE-2021-22861 Unspecified vulnerability in Github
An improper access control vulnerability was identified in GitHub Enterprise Server that allowed authenticated users of the instance to gain write access to unauthorized repositories via specifically crafted pull requests and REST API requests.
network
low complexity
github
6.5