Deserialization and Object Injection

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. The Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that allows unauthenticated remote attackers to execute arbitrary code. This occurs beca…CVE-2017-18365Github · 21% likely

   CWE-502

2. Deserialization of Untrusted Data vulnerability in GitHub Enterprise Server leading to Remote Code ExecutionCVE-2022-23734GitHub · CVSS 8.8 · 2.8% likely

   CWE-5021 bounty report

3. GitHub Enterprise before 20120304 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set the public_key[user…CVE-2012-2055Github · 1.8% likely

   CWE-913

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.