Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveGitHub_PCVE-2022-23739
HistoryJan 17, 2023 - 7:15 p.m.

CVE-2022-23739

2023-01-1719:15:11
CWE-863
GitHub_P
web.nvd.nist.gov
40
github
enterprise server
cve-2022-23739
privilege escalation
graphql api
github apps
authorization
vulnerability
github bug bounty program

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.003

Percentile

68.7%

JSON

An incorrect authorization vulnerability was identified in GitHub Enterprise Server, allowing for escalation of privileges in GraphQL API requests from GitHub Apps. This vulnerability allowed an app installed on an organization to gain access to and modify most organization-level resources that are not tied to a repository regardless of granted permissions, such as users and organization-wide projects. Resources associated with repositories were not impacted, such as repository file content, repository-specific projects, issues, or pull requests. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.7.1 and was fixed in versions 3.3.16, 3.4.11, 3.5.8, 3.6.4, 3.7.1. This vulnerability was reported via the GitHub Bug Bounty program.

Affected configurations

Nvd
Vulners
Node
githubenterprise_serverRange<3.3.16
OR
githubenterprise_serverRange3.4.0–3.4.11
OR
githubenterprise_serverRange3.5.0–3.5.8
OR
githubenterprise_serverRange3.6.0–3.6.4
OR
githubenterprise_serverMatch3.7.0
VendorProductVersionCPE
githubenterprise_server*cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*
githubenterprise_server3.7.0cpe:2.3:a:github:enterprise_server:3.7.0:*:*:*:*:*:*:*

CNA Affected

[
  {
    "vendor": "GitHub",
    "product": "GitHub Enterprise Server",
    "versions": [
      {
        "version": "3.3",
        "status": "affected",
        "lessThan": "3.3.16",
        "versionType": "custom"
      },
      {
        "version": "3.4",
        "status": "affected",
        "lessThan": "3.4.11",
        "versionType": "custom"
      },
      {
        "version": "3.5",
        "status": "affected",
        "lessThan": "3.5.8",
        "versionType": "custom"
      },
      {
        "version": "3.6",
        "status": "affected",
        "lessThan": "3.6.4",
        "versionType": "custom"
      },
      {
        "version": "3.7",
        "status": "affected",
        "lessThan": "3.7.1",
        "versionType": "custom"
      }
    ]
  }
]

Related

hackerone 1
nvd 1
prion 1
cvelist 1
wallarmlab 1
hackerone
hackerone
GitHub: Github Apps can use Scoped-User-To-Server Tokens to Obtain Full Access to User's Projects in Project V2 GraphQL api
2022-09-26 04:55:04
nvd
nvd
CVE-2022-23739
2023-01-17 19:15:11
prion
prion
Authorization
2023-01-17 19:15:00
cvelist
cvelist
CVE-2022-23739 Incorrect authorization check in GitHub Enterprise Server leading to escalation of privileges in GraphQL API requests from GitHub Apps using scoped user-to-server tokens
2023-01-17 00:00:00
wallarmlab
wallarmlab
Don’t Let API Leaks Sink Your Ship | API Security Newsletter
2023-02-02 14:24:48

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.003

Percentile

68.7%

JSON
Related for CVE-2022-23739
hackerone1nvd1prion1cvelist1wallarmlab1