CVE-2023-46645

Summary

CVE-2023-46645 is a path traversal vulnerability discovered in GitHub Enterprise Server. It enables arbitrary file reading when constructing GitHub Pages sites. For an attacker to exploit this weakness, they must have permission to create and build a GitHub Pages site on the impacted GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server starting from 3.7 and was addressed in subsequent releases 3.7.19, 3.8.12, 3.9.7, 3.10.4, and 3.11.1. This issue was brought to GitHub's attention through their Bug Bounty program.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.