FICHE CVE

CVE-2023-46649

Publiée le 2023-12-21 · Dernière modification le 2026-06-17

A race condition in GitHub Enterprise Server was identified that could allow an attacker administrator access. To exploit this, an organization needs to be converted from a user. This vulnerability affected all versions of GitHub Enterprise Server since 3.7 and was fixed in version 3.7.19, 3.8.12, 3.9.7, 3.10.4, and 3.11.1.

CVSS 3.16.3 MOYENNE

Type de faiblesse

Situation de concurrence TOCTOU · CWE-367