CVE-2024-0200

Summary

CVE-2024-0200 is a newly disclosed vulnerability in GitHub Enterprise Server that allows for reflection injection, leading to potential remote code execution. This vulnerability can be exploited by an actor with the organization owner role, who must be logged into an affected instance. By leveraging this unsafe reflection issue, an attacker could execute user-controlled methods and gain unauthorized access to the system. GitHub Enterprise Server versions prior to 3.12 were impacted, with patches released in versions 3.8.13, 3.9.8, 3.10.5, and 3.11.3. This critical security flaw was reported via the GitHub Bug Bounty program.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.