Improper Authentication in GitHub Enterprise Server leading to Authentication Bypass for Public Repository Data

CVE-2023-6847

What is CVE-2023-6847?

An improper authentication vulnerability was found in GitHub Enterprise Server, which permits the bypass of Private Mode through a specially crafted API request. This vulnerability is particularly concerning as it necessitates only network access to the Enterprise Server appliance set to Private Mode. It affects all versions from 3.9 and has been addressed in updates 3.9.7, 3.10.4, and 3.11.1. The issue was reported via the GitHub Bug Bounty program, emphasizing the importance of community engagement in cybersecurity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References