CVE-2025-3124

Summary

CVE-2025-3124 is a missing authorization vulnerability affecting all versions of GitHub Enterprise Server prior to 3.17. This issue allowed unauthorized users to view the names of private repositories that they shouldn't have access to in the Security Overview. For the vulnerability to be exploited, the Security Overview had to be filtered using the `archived:` filter, and all other access controls had to be functioning normally. This issue posed a significant risk to the confidentiality of private repositories and was addressed in versions 3.13.14, 3.14.11, 3.15.6, and 3.16.2.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.