Skip to content

Latest commit

 

History

History
23 lines (13 loc) · 780 Bytes

README.md

File metadata and controls

23 lines (13 loc) · 780 Bytes

Intro

This repository contains exploits we have developed for GitHub Enterprise vulnerabilities CVE-2024-0507 and CVE-2024-0200.

Check out the full writeup at https://blog.convisoappsec.com/en/analysis-of-github-enterprise-vulnerabilities-cve-2024-0507-cve-2024-0200/

CVE-2024-0507

Privilege Escalation by Code Injection in the Management Console in GitHub Enterprise Server

CVE-2024-0507.

CVE-2024-0200

Unsafe Reflection in Github Enterprise Server leading to Command Injection

CVE-2024-0200.

References

  1. https://docs.github.com/en/[email protected]/admin/release-notes#3.11.3-security-fixes
  2. https://www.cve.org/cverecord?id=CVE-2024-0507
  3. https://www.cve.org/cverecord?id=CVE-2024-0200