Github Sårbarheter

Tidslinje

Typ

Bug Tracking Software96

Produkt

GitHub Enterprise Server68
GitHub Community Edition12
GitHub Enterprise Edition12
GitHub Electron5
GitHub cmark-gfm2

Åtgärd

Official Fix82
Temporary Fix0
Workaround0
Unavailable0
Not Defined14

Utnyttjbarhet

High1
Functional0
Proof-of-Concept1
Unproven0
Not Defined94

Åtkomstvektor

Not Defined0
Physical0
Local6
Adjacent11
Network79

Autentisering

Not Defined0
High27
Low47
None22

Användarinteraktion

Not Defined0
Required24
None72

C3BM Index

CVSSv3 Base

≤10
≤20
≤32
≤49
≤521
≤621
≤715
≤818
≤910
≤100

CVSSv3 Temp

≤10
≤20
≤32
≤410
≤522
≤621
≤716
≤822
≤93
≤100

VulDB

≤10
≤20
≤39
≤415
≤519
≤619
≤723
≤811
≤90
≤100

NVD

≤10
≤21
≤30
≤41
≤57
≤65
≤79
≤86
≤916
≤107

CNA

≤10
≤20
≤34
≤44
≤512
≤64
≤79
≤88
≤95
≤107

Säljare

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Utnyttja 0-dagars

<1k15
<2k62
<5k19
<10k0
<25k0
<50k0
<100k0
≥100k0

Utnyttja idag

<1k94
<2k2
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Utnyttja marknadsvolymen

🔴 CTI Aktiviteter

Affected Products (14): Actions Runner (1), CodeQL Action (1), Community Edition (12), Electron (5), Enterprise (1), Enterprise Edition (12), Enterprise Server (68), Gaug.es (1), GitHub Enterprise (1), Git LFS (1), cmark-gfm (2), codeql-cli-binaries (1), livehelperchat (1), paste-markdown (1)

PubliceradBaseTempSårbarhetProdUtnRemEPSSCTICVE
21/03/20244.34.2GitHub Enterprise Server förfalskning på begäran över webbplatsenBug Tracking SoftwareNot DefinedOfficial Fix0.000430.07CVE-2024-2748
21/03/20248.18.0GitHub Enterprise Server Management Console privilegier eskaleringBug Tracking SoftwareNot DefinedOfficial Fix0.000450.04CVE-2024-2443
21/03/20247.37.1GitHub Enterprise Server SSH privilegier eskaleringBug Tracking SoftwareNot DefinedOfficial Fix0.000450.07CVE-2024-2469
29/02/20244.74.6GitHub Enterprise Server Connect Download Token privilegier eskaleringBug Tracking SoftwareNot DefinedOfficial Fix0.000450.00CVE-2024-1908
22/02/20243.93.8GitHub codeql-cli-binaries XML External EntityBug Tracking SoftwareNot DefinedOfficial Fix0.000490.07CVE-2024-25129
14/02/20246.76.5GitHub Enterprise Server privilegier eskaleringBug Tracking SoftwareNot DefinedOfficial Fix0.000450.00CVE-2024-1482
13/02/20245.04.9GitHub Enterprise Server Tag Protections UI cross site scriptingBug Tracking SoftwareNot DefinedOfficial Fix0.000450.00CVE-2024-1084
13/02/20245.04.9GitHub Enterprise Server Symlink kataloggenomgångBug Tracking SoftwareNot DefinedOfficial Fix0.000450.04CVE-2024-1082
13/02/20248.18.0GitHub Enterprise Server Management Console privilegier eskaleringBug Tracking SoftwareNot DefinedOfficial Fix0.000670.04CVE-2024-1378
13/02/20248.18.0GitHub Enterprise Server Management Console privilegier eskaleringBug Tracking SoftwareNot DefinedOfficial Fix0.000670.02CVE-2024-1374

86 fler poster visas inte

🔒 Login Required

You need to signup and login to see more of the remaining 86 results.

◂ TidigareÖversiktNästa ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!