An authorization/sensitive information disclosure vulnerability was identified in GitHub Enterprise Server that allowed a fork to retain read access to an upstream repository after its visibility was changed to private. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.10.0 and was fixed in versions 3.9.4, 3.8.9, 3.7.16 and 3.6.18. This vulnerability was reported via the GitHub Bug Bounty program.
History

Tue, 01 Oct 2024 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_P

Published: 2023-09-01T14:23:42.930Z

Updated: 2024-10-01T14:23:19.054Z

Reserved: 2023-01-17T20:40:37.553Z

Link: CVE-2023-23763

cve-icon Vulnrichment

Updated: 2024-08-02T10:42:25.864Z

cve-icon NVD

Status : Modified

Published: 2023-09-01T15:15:07.620

Modified: 2024-11-21T07:46:47.180

Link: CVE-2023-23763

cve-icon Redhat

No data.