cbcvebase.
CVE-2023-46649
published 2023-12-21

CVE-2023-46649: A race condition in GitHub Enterprise Server was identified that could allow an attacker administrator access. To exploit this, an organization needs to be…

PriorityP336high7CVSS 3.1
AVLACHPRLUINSUCHIHAH
EPSS
0.17%
7.1th percentile
A race condition in GitHub Enterprise Server was identified that could allow an attacker administrator access. To exploit this, an organization needs to be converted from a user. This vulnerability affected all versions of GitHub Enterprise Server since 3.7 and was fixed in version 3.7.19, 3.8.12, 3.9.7, 3.10.4, and 3.11.1.

Affected

10 ranges
VendorProductVersion rangeFixed in
githubenterprise_server——
githubenterprise_server>= 3.10.0 < 3.10.43.10.4
githubenterprise_server3.10.0 – 3.10.3—
githubenterprise_server3.11 – 3.11.0—
githubenterprise_server>= 3.7.0 < 3.7.193.7.19
githubenterprise_server3.7.0 – 3.7.18—
githubenterprise_server>= 3.8.0 < 3.8.123.8.12
githubenterprise_server3.8.0 – 3.8.11—
githubenterprise_server>= 3.9.0 < 3.9.73.9.7
githubenterprise_server3.9.0 – 3.9.6—
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.