GitHub Enterprise Server up to 3.8.14/3.9.9/3.10.6/3.11.4 Tag Protections UI tag name pattern cross site scripting

Summaryinfo

A vulnerability was found in GitHub Enterprise Server up to 3.8.14/3.9.9/3.10.6/3.11.4. It has been declared as problematic. Affected by this issue is some unknown functionality of the component Tag Protections UI. Executing a manipulation of the argument tag name pattern can lead to cross site scripting. This vulnerability is tracked as CVE-2024-1084. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability was found in GitHub Enterprise Server up to 3.8.14/3.9.9/3.10.6/3.11.4 (Bug Tracking Software). It has been declared as problematic. This vulnerability affects some unknown processing of the component Tag Protections UI. The manipulation of the argument tag name pattern with an unknown input leads to a cross site scripting vulnerability. The CWE definition for the vulnerability is CWE-79. The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. As an impact it is known to affect integrity. CVE summarizes:

Cross-site Scripting in the tag name pattern field in the tag protections UI in GitHub Enterprise Server allows a malicious website that requires user interaction and social engineering to make changes to a user account via CSP bypass with created CSRF tokens. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12  and was fixed in all versions of 3.11.5, 3.10.7, 3.9.10, and 3.8.15. This vulnerability was reported via the GitHub Bug Bounty program.

The weakness was disclosed 02/13/2024 by Johan Carlsson. The advisory is shared for download at docs.github.com. This vulnerability was named CVE-2024-1084 since 01/30/2024. Successful exploitation requires user interaction by the victim. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1059.007.

Upgrading to version 3.8.15, 3.9.10, 3.10.7 or 3.11.5 eliminates this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Bug Tracking Software

Vendor

• GitHub

Name

• Enterprise Server

Version

• 3.8.0
• 3.8.1
• 3.8.2
• 3.8.3
• 3.8.4
• 3.8.5
• 3.8.6
• 3.8.7
• 3.8.8
• 3.8.9
• 3.8.10
• 3.8.11
• 3.8.12
• 3.8.13
• 3.8.14
• 3.9.0
• 3.9.1
• 3.9.2
• 3.9.3
• 3.9.4
• 3.9.5
• 3.9.6
• 3.9.7
• 3.9.8
• 3.9.9
• 3.10.0
• 3.10.1
• 3.10.2
• 3.10.3
• 3.10.4
• 3.10.5
• 3.10.6
• 3.11.0
• 3.11.1
• 3.11.2
• 3.11.3
• 3.11.4

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion