VYPR
← All advisories
Low severity3.9NVD Advisory· Published Dec 21, 2023· Updated Jun 17, 2026

CVE-2023-6690

CVE-2023-6690

Description

A race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on transferred repositories by making a GraphQL mutation to alter repository permissions during the transfer. This vulnerability affected GitHub Enterprise Server version 3.8.0 and above and was fixed in version 3.8.12, 3.9.7, 3.10.4, and 3.11.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • GitHub/Enterprise Server4 versions
    cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*range: >=3.8.0,<3.8.12
    • cpe:2.3:a:github:enterprise_server:3.11.0:*:*:*:*:*:*:*
    • (no CPE)range: >=3.8.0, <3.8.12, <3.9.7, <3.10.4, <3.11.1
    • (no CPE)range: 3.8

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.