ahacker1

Missing Authorization Check in GitHub Enterprise Server Allows Unauthorized Uploads to Repository Migration Exports

Incomplete cache verification issue in GitHub Enterprise Server leading to exposure of private repo files

Incorrect authorization check in GitHub Enterprise Server leading to escalation of privileges in GraphQL API requests from GitHub Apps using scoped user-to-server tokens

Improper access control in all versions of GitHub Enterprise Server allows unauthorized users to view private repository names via the "Get a check run" API endpoint. This vulnerability did not allow unauthorized access to any repository content besides t

Privilege Management vulnerability was identified in GitHub Enterprise Server that allowed GitHub Apps to grant themselves write access

An XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when using SAML authentication with specific identity providers utilizing publicly exposed signed federation metadata XML. This vulnerability allowed an attacker with d

An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server, allowing an attacker to update the title, assignees, and labels of any issue inside a public repository. This was only exploitable inside a public repository. This vulner

Improper Privilege Management vulnerability was identified in GitHub Enterprise Server that allowed Privilege Escalation

Improper Authentication in GitHub Enterprise Server leading to Authentication Bypass for Public Repository Data

GitHub Enterprise Server Information Disclosure Vulnerability Exposes Private Repository Names via Deploy Keys