Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-23765

Опубликовано: 30 авг. 2023
Источник: nvd
CVSS3: 4.8
CVSS3: 6.5
EPSS Низкий

Описание

An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff in a re-opened Pull Request. To exploit this vulnerability, an attacker would need write access to the repository. This vulnerability was reported via the GitHub Bug Bounty Program https://bounty.github.com/ .

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*
Версия от 3.6.0 (включая) до 3.6.16 (исключая)
cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*
Версия от 3.7.0 (включая) до 3.7.13 (исключая)
cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*
Версия от 3.8.0 (включая) до 3.8.6 (исключая)
cpe:2.3:a:github:enterprise_server:3.9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 23%
0.00076
Низкий

4.8 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-697
CWE-697

Связанные уязвимости

github логотип

GHSA-wj8c-rxgm-9jcm

CVSS3: 4.8
github
больше 2 лет назад

An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff in a re-opened Pull Request. To exploit this vulnerability, an attacker would need write access to the repository. This vulnerability was reported via the GitHub Bug Bounty Program https://bounty.github.com/ .

EPSS

Процентиль: 23%
0.00076
Низкий

4.8 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-697
CWE-697