CVE-2023-23763

Katalog CVE

CVSS 5.3 · Medium EPSS 0,67%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada github enterprise server. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

An authorization/sensitive information disclosure vulnerability was identified in GitHub Enterprise Server that allowed a fork to retain read access to an upstream repository after its visibility was changed to private. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.10.0 and was fixed in versions 3.9.4, 3.8.9, 3.7.16 and 3.6.18. This vulnerability was reported via the GitHub Bug Bounty program.

Rincian

Terbit di NVD

1 September 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-862: Missing Authorization

EPSS (30 hari)

0,67% peluang dieksploitasi; lebih tinggi dari 50,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://docs.github.com/en/enterprise-server@3.6/admin/release-notes#3.6.18-security-fixes release notes
• https://docs.github.com/en/enterprise-server@3.7/admin/release-notes#3.7.16-security-fixes release notes
• https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.9-security-fixes release notes
• https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.4-security-fixes release notes