DeutschShown in its original language — a full translation is planned for a future version.
Microsoft GitHub Enterprise: Mehrere Schwachstellen
view advisory published 2025-04-21
Ein entfernter Angreifer kann mehrere Schwachstellen in Microsoft GitHub Enterprise ausnutzen, um Informationen offenzulegen, und um beliebigen Programmcode auszuführen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-3509US | high7.2 | — | ||
A Remote Code Execution (RCE) vulnerability was identified in GitHub Enterprise Server that allowed attackers to execute arbitrary code by exploiting the pre-receive hook functiona… | ||||
| CVE-2025-3246US | high7.6 | — | ||
An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed cross-site scripting in GitHub Markdown that used `$$..$$` math blocks. E… | ||||
| CVE-2025-3124US | medium4.3OT elevated | — | ||
A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a user to see the names of private repositories that they wouldn't otherwise have acce… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Enterprise Server Release 3.13.14 vom 2025-04-21external
- GitHub Enterprise Server Release 3.14.11 vom 2025-04-21external
- GitHub Enterprise Server Release 3.15.6 vom 2025-04-21external
- GitHub Enterprise Server Release 3.16.2 vom 2025-04-21external
- WID-SEC-W-2025-0863 - CSAF Versionself
- WID-SEC-2025-0863 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan