Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pg25-36p5-jfv5

Опубликовано: 23 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

CRITICAL: An improper neutralization of argument delimiters in a command vulnerability was identified in GitHub Enterprise Server that enabled remote code execution. To exploit this vulnerability, an attacker would need permission to create and build GitHub Pages using GitHub Actions. This vulnerability affected only version 3.7.0 of GitHub Enterprise Server and was fixed in version 3.7.1. This vulnerability was reported via the GitHub Bug Bounty program.

CRITICAL: An improper neutralization of argument delimiters in a command vulnerability was identified in GitHub Enterprise Server that enabled remote code execution. To exploit this vulnerability, an attacker would need permission to create and build GitHub Pages using GitHub Actions. This vulnerability affected only version 3.7.0 of GitHub Enterprise Server and was fixed in version 3.7.1. This vulnerability was reported via the GitHub Bug Bounty program.

EPSS

Процентиль: 86%
0.02923
Низкий

8.8 High

CVSS3

Дефекты

CWE-88

Связанные уязвимости

CVSS3: 8.8
nvd
около 3 лет назад

CRITICAL: An improper neutralization of argument delimiters in a command vulnerability was identified in GitHub Enterprise Server that enabled remote code execution. To exploit this vulnerability, an attacker would need permission to create and build GitHub Pages using GitHub Actions. This vulnerability affected only version 3.7.0 of GitHub Enterprise Server and was fixed in version 3.7.1. This vulnerability was reported via the GitHub Bug Bounty program.

EPSS

Процентиль: 86%
0.02923
Низкий

8.8 High

CVSS3

Дефекты

CWE-88