CVE-2023-6803
published 2023-12-21CVE-2023-6803: A race condition in GitHub Enterprise Server allows an outside collaborator to be added while a repository is being transferred. This vulnerability affected…
PriorityP416medium4CVSS 3.1
AVLACHPRHUIRSUCNIHAN
EPSS
0.17%
6.2th percentile
A race condition in GitHub Enterprise Server allows an outside collaborator to be added while a repository is being transferred. This vulnerability affected all versions of GitHub Enterprise Server since 3.8 and was fixed in version 3.8.12, 3.9.7, 3.10.4, and 3.11.1.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| github | enterprise_server | — | — |
| github | enterprise_server | 3.10 – 3.10.3 | — |
| github | enterprise_server | >= 3.10.0 < 3.10.4 | 3.10.4 |
| github | enterprise_server | 3.11 – 3.11.0 | — |
| github | enterprise_server | 3.8 – 3.8.11 | — |
| github | enterprise_server | >= 3.8.0 < 3.8.12 | 3.8.12 |
| github | enterprise_server | 3.9 – 3.9.6 | — |
| github | enterprise_server | >= 3.9.0 < 3.9.7 | 3.9.7 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://docs.github.com/en/[email protected]/admin/release-notes#3.10.4https://docs.github.com/en/[email protected]/admin/release-notes#3.11.1https://docs.github.com/en/[email protected]/admin/release-notes#3.8.12https://docs.github.com/en/[email protected]/admin/release-notes#3.9.7https://docs.github.com/en/[email protected]/admin/release-notes#3.10.4https://docs.github.com/en/[email protected]/admin/release-notes#3.11.1https://docs.github.com/en/[email protected]/admin/release-notes#3.8.12https://docs.github.com/en/[email protected]/admin/release-notes#3.9.7
2023-12-21
Published