CVE-2021-41599: fallo en GitHub Enterprise Server
Improper control flow in GitHub Enterprise Server hosted Pages leads to remote code execution
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 2.2%
A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.3 and was fixed in versions 3.0.21, 3.1.13, 3.2.5. This vulnerability was reported via the GitHub Bug Bounty program.
Productos afectados
GitHub · GitHub Enterprise ServerCVEs relacionadas — GitHub Enterprise Server
En el mismo producto, de las más peligrosas a las menos.
CVE-2020-10518—Unsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise ServerEPSS 3.7%CVE-2020-10519—Unsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise ServerEPSS 3.1%CVE-2022-23734HIGHDeserialization of Untrusted Data vulnerability in GitHub Enterprise Server leading to Remote Code ExecutionEPSS 2.8%CVE-2021-22864—Unsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise ServerEPSS 2.6%CVE-2022-46256HIGHPath traversal in GitHub Enterprise Server leading to remote code execution in GitHub PagesEPSS 2.1%CVE-2024-2443CRITICALImproper input validation vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Management ConsoleEPSS 2.1%