VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 21, 2023· Updated Aug 2, 2024

CVE-2023-6690

CVE-2023-6690

Description

A race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on transferred repositories by making a GraphQL mutation to alter repository permissions during the transfer. This vulnerability affected GitHub Enterprise Server version 3.8.0 and above and was fixed in version 3.8.12, 3.9.7, 3.10.4, and 3.11.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • GitHub/Enterprise Serverllm-fuzzy2 versions
    >=3.8.0, <3.8.12, <3.9.7, <3.10.4, <3.11.1+ 1 more
    • (no CPE)range: >=3.8.0, <3.8.12, <3.9.7, <3.10.4, <3.11.1
    • (no CPE)range: 3.8

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.