ahacker1

Improper Authentication in GitHub Enterprise Server leading to Authentication Bypass for Public Repository Data

Improper access control in all versions of GitHub Enterprise Server allows unauthorized users to view private repository names via the "Get a check run" API endpoint. This vulnerability did not allow unauthorized access to any repository content besides t

Incorrect authorization check in GitHub Enterprise Server leading to escalation of privileges in GraphQL API requests from GitHub Apps using scoped user-to-server tokens

Incomplete cache verification issue in GitHub Enterprise Server leading to exposure of private repo files