CVE-2023-51380

Summary

CVE-2023-51380 is an authorization vulnerability affecting GitHub Enterprise Server. This issue allowed unauthorized users to read issue comments using improperly scoped tokens. The vulnerability impacted all versions of the server since 3.7 and was rectified in subsequent updates, including 3.7.19, 3.8.12, 3.9.7, 3.10.4, and 3.11.1. Users are advised to apply these patches promptly to mitigate the risk of unintended data access.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.