title: Privilege Escalation by Code Injection in the Management Console in GitHub Enterprise Server
description: An attacker with access to a Management Console user account with the editor role could escalate privileges through a command injection vulnerability in the Management Console. This vulnerability affected all versions of GitHub Enterprise Server and was fixed in versions 3.11.3, 3.10.5, 3.9.8, and 3.8.13 This vulnerability was reported via the GitHub Bug Bounty program.
problem types: CWE-20 Improper Input Validation
affected:
{
defaultStatus: unaffected
product: Enterprise Server
vendor: GitHub
versions:
lessThanOrEqual: 3.8.12, status: affected, version: 3.8.0, versionType: semver
lessThanOrEqual: 3.9.7, status: affected, version: 3.9.0, versionType: semver
lessThanOrEqual: 3.10.4, status: affected, version: 3.10.0, versionType: semver
lessThanOrEqual: 3.11.2, status: affected, version: 3.11.0, versionType: semver
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL