CVE-2024-0200

CVSS 3.1 Score 7.2 of 10 (high)

Details

Published Jan 16, 2024
Updated: Jan 23, 2024
CWE ID 470

Summary

CVE-2024-0200 is an unsafe reflection vulnerability in GitHub Enterprise Server that could potentially lead to reflection injection and remote code execution. This vulnerability affects all versions of GitHub Enterprise Server prior to 3.12. To exploit this bug, an attacker would need to be logged into an account on the GitHub Enterprise Server instance with the organization owner role. The vulnerability was reported through the GitHub Bug Bounty program and has been fixed in versions 3.8.13, 3.9.8, 3.10.5, and 3.11.3 of the product. This vulnerability has a base severity rating of HIGH, with a base score of 7.2 out of 10, and poses a potential danger to organizations as it allows execution of user-controlled methods and remote code execution with high privileges and confidentiality impact while affecting the availability with low integrity impact on the network level.

(Note: The paragraph is a combination of information provided in the original text along with additional context for clarity.)

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-0200 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options