Vulnerabilities > Github

DATE CVE VULNERABILITY TITLE RISK
2023-12-21 CVE-2023-6847 Improper Authentication vulnerability in Github Enterprise Server
An improper authentication vulnerability was identified in GitHub Enterprise Server that allowed a bypass of Private Mode by using a specially crafted API request.
network
low complexity
github CWE-287
7.5
2023-09-22 CVE-2023-23766 Incorrect Comparison vulnerability in Github Enterprise Server
An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff in a re-opened Pull Request.
network
low complexity
github CWE-697
6.5
2023-09-01 CVE-2023-23763 Missing Authorization vulnerability in Github Enterprise Server
An authorization/sensitive information disclosure vulnerability was identified in GitHub Enterprise Server that allowed a fork to retain read access to an upstream repository after its visibility was changed to private.
network
low complexity
github CWE-862
5.3
2023-08-30 CVE-2023-23765 Incorrect Comparison vulnerability in Github Enterprise Server
An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff in a re-opened Pull Request.
network
low complexity
github CWE-697
6.5
2023-07-27 CVE-2023-23764 Incorrect Comparison vulnerability in Github Enterprise Server
An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff within the GitHub pull request UI.
network
low complexity
github CWE-697
7.1
2023-07-13 CVE-2023-37463 Unspecified vulnerability in Github Cmark-Gfm
cmark-gfm is an extended version of the C reference implementation of CommonMark, a rationalized version of Markdown syntax with a spec.
network
low complexity
github
7.5
2023-04-07 CVE-2023-23761 Improper Authentication vulnerability in Github Enterprise Server
An improper authentication vulnerability was identified in GitHub Enterprise Server that allowed an unauthorized actor to modify other users' secret gists by authenticating through an SSH certificate authority.
network
high complexity
github CWE-287
5.3
2023-04-07 CVE-2023-23762 Incorrect Comparison vulnerability in Github Enterprise Server
An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff.
network
high complexity
github CWE-697
5.3
2023-03-31 CVE-2023-24824 Unspecified vulnerability in Github Cmark-Gfm
cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C.
network
low complexity
github
7.5
2023-03-31 CVE-2023-26485 Unspecified vulnerability in Github Cmark-Gfm
cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C.
network
low complexity
github
7.5