CVE-2024-8810
published 2024-11-07CVE-2024-8810: A GitHub App installed in organizations could upgrade some permissions from read to write access without approval from an organization administrator. An…
PriorityP338medium6.5CVSS 3.1
AVNACLPRHUINSUCHIHAN
EPSS
0.43%
34.6th percentile
A GitHub App installed in organizations could upgrade some permissions from read to write access without approval from an organization administrator. An attacker would require an account with administrator access to install a malicious GitHub App. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.14 and was fixed in versions 3.14.1, 3.13.4, 3.12.9, 3.11.15, and 3.10.17. This vulnerability was reported via the GitHub Bug Bounty program.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| github | enterprise_server | — | — |
| github | enterprise_server | >= 3.10.0 < 3.10.17 | 3.10.17 |
| github | enterprise_server | 3.10.0 – 3.10.16 | — |
| github | enterprise_server | >= 3.11.0 < 3.11.15 | 3.11.15 |
| github | enterprise_server | 3.11.0 – 3.11.14 | — |
| github | enterprise_server | >= 3.12.0 < 3.12.9 | 3.12.9 |
| github | enterprise_server | 3.12.0 – 3.12.8 | — |
| github | enterprise_server | >= 3.13.0 < 3.13.4 | 3.13.4 |
| github | enterprise_server | 3.13.0 – 3.13.3 | — |
| github | enterprise_server | 3.14 – 3.14.0 | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
nvdv4.08.7HIGHCVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:N/R:U/V:C/RE:L/U:Amber
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Suricata
ET WEB_SPECIFIC_APPS Tenda SetFirewallCfg firewallEn Parameter Buffer Overflow Attempt (CVE-2025-8810, CVE-2025-29358, CVE-2025-1851, CVE-2024-2809)
suricata·2025-10-10·CVSS 8.8
CVE-2025-8810 [HIGH] ET WEB_SPECIFIC_APPS Tenda SetFirewallCfg firewallEn Parameter Buffer Overflow Attempt (CVE-2025-8810, CVE-2025-29358, CVE-2025-1851, CVE-2024-2809)
ET WEB_SPECIFIC_APPS Tenda SetFirewallCfg firewallEn Parameter Buffer Overflow Attempt (CVE-2025-8810, CVE-2025-29358, CVE-2025-1851, CVE-2024-2809)
Rule: alert http any any -> $HOME_NET any (msg:"ET WEB_SPECIFIC_APPS Tenda SetFirewallCfg firewallEn Parameter Buffer Overflow Attempt (CVE-2025-8810, CVE-2025-29358, CVE-2025-1851, CVE-2024-2809)"; flow:established,to_server; http.method; content:"POST"; http.uri; bsize:22; content:"/goform/SetFirewallCfg"; fast_pattern; http.request_body; content:"firewallEn|3d|"; pcre:"/^[^&]{100,}(?:&|$)/R"; reference:cve,2025-8810; reference:url,www.cve.org/CVERecord/SearchResults?query=SetFirewallCfg; reference:cve,2025-1851; reference:cve,2025-29358; reference:url,github.com/peris-navince/founded-0-days/blob/main/Tenda/ac8/formSetFirewallCfg/1.md; refe
No public exploits indexed.
No writeups or analysis indexed.
https://docs.github.com/en/[email protected]/admin/release-notes#3.10.17https://docs.github.com/en/[email protected]/admin/release-notes#3.11.15https://docs.github.com/en/[email protected]/admin/release-notes#3.12.9https://docs.github.com/en/[email protected]/admin/release-notes#3.13.4https://docs.github.com/en/[email protected]/admin/release-notes#3.14.1
2024-11-07
Published