CVE-2023-46646
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Dec 21, 2023
Updated: Dec 16, 2024
CWE ID 639
Summary
CVE-2023-46646 is a vulnerability affecting all versions of GitHub Enterprise Server. An improper access control issue was identified, allowing unauthorized users to view the names of private repositories via the "Get a check run" API endpoint. It's important to note that this vulnerability did not provide unauthorized access to repository content beyond the names. Affected versions include 3.7.0 and above, which were addressed in patches 3.17.19, 3.8.12, 3.9.7, 3.10.4, and 3.11.0.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Github Enterprise Server
Affected Vendors
- GitHub