Description
An attacker with an Administrator role in GitHub Enterprise Server could gain SSH root access via remote code execution. This vulnerability affected GitHub Enterprise Server version 3.8.0 and above and was fixed in version 3.8.17, 3.9.12, 3.10.9, 3.11.7 and 3.12.1. This vulnerability was reported via the GitHub Bug Bounty program.
Metrics
CVSS 3.1 7.2/10
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| GitHub | Enterprise Server | >= 3.8.0, <= 3.8.16; >= 3.9.0, <= 3.9.11; >= 3.10.0, <= 3.10.8; >= 3.11.0, <= 3.11.6; >= 3.12, <= 3.12.0 |
| github | enterprise_server | >= 3.8.0, <= 3.8.16; >= 3.9.0, <= 3.9.11; >= 3.10.0, <= 3.10.8; >= 3.11.0, <= 3.11.6; >= 3.12, <= 3.12.0 |
References
- https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.9Release Notes
- https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.7Release Notes
- https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.12.1Release Notes
- https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.17Release Notes
- https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.12Release Notes
- https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.9Release Notes
- https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.7Release Notes
- https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.12.1Release Notes
- https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.17Release Notes
- https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.12Release Notes
Timeline
- Published
- Mar 20, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed