CVE-2024-0200
CVSS 3.1 Score 9.8 of 10 (high)
Details
Summary
CVE-2024-0200 is a newly disclosed vulnerability in GitHub Enterprise Server that allows for reflection injection, leading to potential remote code execution. This vulnerability can be exploited by an actor with the organization owner role, who must be logged into an affected instance. By leveraging this unsafe reflection issue, an attacker could execute user-controlled methods and gain unauthorized access to the system. GitHub Enterprise Server versions prior to 3.12 were impacted, with patches released in versions 3.8.13, 3.9.8, 3.10.5, and 3.11.3. This critical security flaw was reported via the GitHub Bug Bounty program.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Github Enterprise Server
Affected Vendors
- GitHub
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions