CVE-2024-3470

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

An Improper Privilege Management vulnerability was identified in GitHub Enterprise Server that allowed an attacker to use a deploy key pertaining to an organization to bypass an organization ruleset. An attacker would require access to a valid deploy key for a repository in the organization as well as repository administrator access. This vulnerability affected versions of GitHub Enterprise Server 3.11 to 3.12 and was fixed in versions 3.11.8 and 3.12.2. This vulnerability was reported via the GitHub Bug Bounty program.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

No affected versions have been published.

Timeline

Published: Apr 19, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-347015.9CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis. It is possible for users to be considered as the requester of CVE-2024-347025.3Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an object identifier or using explicit enc CVE-2024-347037.5Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an object identifier or using explicit enc CVE-2024-347045.9era-compiler-solidity is the ZKsync compiler for Solidity. The problem occurred during instruction selection in the `DAGCombine` phase whil CVE-2024-347069.8Valtimo is an open source business process and case management platform. When opening a form in Valtimo, the access token (JWT) of the user CVE-2024-347074.8Nautobot is a Network Source of Truth and Network Automation Platform. A Nautobot user with admin privileges can modify the `BANNER_TOP`, `B CVE-2024-347084.9Directus is a real-time API and App dashboard for managing SQL database content. A user with permission to view any collection using redacte CVE-2024-347095.4Directus is a real-time API and App dashboard for managing SQL database content. Prior to 10.11.0, session tokens function like the other JW CVE-2024-34713.4The Button Generator WordPress plugin before 3.0 does not have CSRF check in place when bulk deleting, which could allow attackers to make CVE-2024-347107.1Wiki.js is al wiki app built on Node.js. Client side template injection was discovered, that could allow an attacker to inject malicious Jav CVE-2024-347118.2GeoServer is an open source server that allows users to share and edit geospatial data. An improper URI validation vulnerability exists that CVE-2024-347126.5Oceanic is a NodeJS library for interfacing with Discord. Prior to version 1.10.4, input to functions such as `Client.rest.channels.removeBa