FICHE CVE

CVE-2023-6804

Publiée le 2023-12-21 · Dernière modification le 2026-06-17

Improper privilege management allowed arbitrary workflows to be committed and run using an improperly scoped PAT. To exploit this, a workflow must have already existed in the target repo. This vulnerability affected all versions of GitHub Enterprise Server since 3.8 and was fixed in version 3.8.12, 3.9.7, 3.10.4, and 3.11.1.

CVSS 3.16.5 MOYENNE

Type de faiblesse

Gestion des privilèges incorrecte · CWE-269