Sensitive Information in Log File in GitHub Enterprise Server

CVE-2023-6802

Summary

A vulnerability in GitHub Enterprise Server allows for the unintentional logging of sensitive information, potentially giving unauthorized access to the management console. This security risk can manifest if an attacker gains access to the log files or backup archives from the appliance, or through services that receive streamed logs. All versions of GitHub Enterprise Server from 3.8 are affected and should be updated to versions 3.8.12, 3.9.7, 3.10.4, or 3.11.1 to mitigate this risk.

References