CVE-2024-5815

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions prior to 3.14

Description: A Cross-Site Request Forgery issue in GitHub Enterprise Server allowed write operations on a victim-owned repository by exploiting incorrect request types. The attacker would have to be a trusted GitHub Enterprise Server user, and the victim would have to visit a tag in the attacker's fork of their own repository.

Recommendations: For versions prior to 3.9.17, update to version 3.9.17. For versions prior to 3.10.14, update to version 3.10.14. For versions prior to 3.11.12, update to version 3.11.12. For versions prior to 3.12.6, update to version 3.12.6. For versions prior to 3.13.1, update to version 3.13.1.