CVE-2024-0200
CVSS 3.1 Score 7.2 of 10 (high)
Details
Summary
CVE-2024-0200 is an unsafe reflection vulnerability in GitHub Enterprise Server that could potentially lead to reflection injection and remote code execution. This vulnerability affects all versions of GitHub Enterprise Server prior to 3.12. To exploit this bug, an attacker would need to be logged into an account on the GitHub Enterprise Server instance with the organization owner role. The vulnerability was reported through the GitHub Bug Bounty program and has been fixed in versions 3.8.13, 3.9.8, 3.10.5, and 3.11.3 of the product. This vulnerability has a base severity rating of HIGH, with a base score of 7.2 out of 10, and poses a potential danger to organizations as it allows execution of user-controlled methods and remote code execution with high privileges and confidentiality impact while affecting the availability with low integrity impact on the network level. (Note: The paragraph is a combination of information provided in the original text along with additional context for clarity.)
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions