Inspector-Amibitious

**Name of the Vulnerable Software and Affected Versions** GitHub Enterprise Server versions prior to 3.6.17 GitHub Enterprise Server versions prior to 3.7.15 GitHub Enterprise Server versions prior to 3.8.8 GitHub Enterprise Server versions prior to 3.9.3 GitHub Enterprise Server versions prior to 3.10.1 **Description** An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff in a re-opened Pull Request. To exploit this issue, an attacker would need write access to the repository. This vulnerability was reported via the GitHub Bug Bounty program. **Recommendations** For versions prior to 3.6.17, update to version 3.6.17 or later. For versions prior to 3.7.15, update to version 3.7.15 or later. For versions prior to 3.8.8, update to version 3.8.8 or later. For versions prior to 3.9.3, update to version 3.9.3 or later. For versions prior to 3.10.1, update to version 3.10.1 or later.

**Name of the Vulnerable Software and Affected Versions** GitHub Enterprise Server (affected versions not specified) **Description** An incorrect comparison issue was identified that allows commit smuggling by displaying an incorrect diff in a re-opened Pull Request. To exploit this, an attacker needs write access to the repository. This issue was reported via the GitHub Bug Bounty Program. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.