SAML Signature verification bypass allows logging into any user (with specific conditions) Analysed #2579939 Valid Access Control Critical 2024-10-10 – 196 Access body and title of Internal Repo Issues in Projects #2501036 Valid Information Disclosure Medium 2024-07-31 – 100 GitHub Apps can access suspended installations via scoped user-to-server tokens #2484635 Valid Access Control Medium 2024-07-31 – 90 Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via RCE in ghe-update-check #2325023 Valid Command and Code Injection High 2024-09-17 – 88 Invite tokens have Insufficient entropy in GHES Management Console #2197801 Valid Cryptography Medium 2024-01-12 – 81 Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via nomad template injection and audit-forward #2332623 Valid Command and Code Injection High 2024-09-13 – 80 Self XSS in Tag name pattern field /<username>/<reponame>/settings/tag_protection/new #2246576 Valid Cross-site Scripting Medium 2024-04-15 – 76 Information Leakage via Clicked Link in GitHub Repository (Fingerprinting) #2505761 Valid Information Disclosure Medium 2024-10-17 $4,000 72 Privilege Escalation to Root SSH Access via Pre-Receive Hook Environment in GitHub Enterprise Server #2336236 Valid No weakness recorded High 2024-09-13 – 71 View private repository NWO of deploy key via internal LFS API #2469713 Valid Access Control Medium 2024-07-23 – 70 View Repo and Title of Any Private Check Run #2210179 Valid Insecure Direct Object Reference Medium 2024-01-08 – 64 Source Code and data exfiltration via Github Copilot #2383092 Valid Command and Code Injection Low 2024-08-19 – 63 Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via nomad template injection #2332551 Valid Command and Code Injection High 2024-09-13 – 61 Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via RCE in syslog-ng #2329466 Valid Command and Code Injection High 2024-09-13 – 61 Bypassing Collaborator Restrictions: Retaining Admin Access Post-Repository Transfer #2190827 Valid Access Control Medium 2024-03-15 – 57 GHES Management console EoP (editor to site admin) #2197796 Valid Access Control High 2024-01-08 – 56 Persistent Unauthorized Administrative Access on All Organization Repositories via RC in User Conversion to Organization #2185545 Valid Authentication Medium 2024-03-15 – 51 RC Between GitHub's Repo Update REST API and updateTeamsRepository GraphQL Mutation Results in Covert and Persistent Admin Access Retention #2357443 Valid Misconfiguration and Insecure Design Medium 2024-09-17 – 50 RC Between GitHub's Repo Transfer REST API and updateTeamsRepository GraphQL Mutation Results in Covert and Persistent Admin Access Retention #2216036 Valid Misconfiguration and Insecure Design Medium 2024-01-12 – 50 Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via RCE in collectd #2329547 Valid Command and Code Injection High 2024-09-17 – 47 Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via RCE in actions-console #2323292 Valid Command and Code Injection High 2024-09-17 – 47 [PATs] Ability to leak comments from issues without ANY "Issues" repo permissions by utilizing "Pull Request" permissions #2184950 Valid Access Control Medium 2024-01-03 – 42 [PATs] Token with Read-Only permissions on Issues able to modify issue comments using content write permission #2209433 Valid Access Control Medium 2024-01-03 – 31