CVE-2024-0507

Name of the Vulnerable Software and Affected Versions GitHub Enterprise Server versions prior to 3.8.13 GitHub Enterprise Server versions prior to 3.9.8 GitHub Enterprise Server versions prior to 3.10.5 GitHub Enterprise Server versions prior to 3.11.3

Description The issue is related to insufficient input validation in the Management Console of GitHub Enterprise Server, allowing an attacker with access to a Management Console user account with the editor role to escalate privileges through a command injection vulnerability. This could enable a remote attacker to execute arbitrary commands and elevate their privileges.

Recommendations For versions prior to 3.8.13, update to version 3.8.13 or later. For versions prior to 3.9.8, update to version 3.9.8 or later. For versions prior to 3.10.5, update to version 3.10.5 or later. For versions prior to 3.11.3, update to version 3.11.3 or later.