Security Advisory

CVE-2023-51380

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-12-21 20:45:48
Last updated 2024-08-02 22:32:09
Assigner GitHub_P
State PUBLISHED

Description

An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed issue comments to be read with an improperly scoped token. This vulnerability affected all versions of GitHub Enterprise Server since 3.7 and was fixed in version 3.7.19, 3.8.12, 3.9.7, 3.10.4, and 3.11.1.