地图 / Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via nomad template injection

Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via nomad template injection

代码执行 / 命令注入（通用） / #2332551

厂商: GitHub
严重程度: 中危
赏金: —
弱点: 命令注入（通用）
研究员: @inspector-ambitious
披露日期: 2024-09-13
资产: GitHub Enterprise Server
CVE: CVE-2024-1378

该报告还没有中文解读。

时间线

2024-01-24报告提交
2024-09-13公开披露

阅读 HackerOne 原文 ↗作者 @inspector-ambitious · 版权归作者与 GitHub 所有

同类报告

H1514 Remote Code Execution on kitcrm using bulk customer update of Priority ProductsShopify · 2020-02-06 Remote Code Execution on www.semrush.com/my_reports on Logo uploadSemrush · 2019-06-24 Git flag injection - local file overwrite to remote code executionGitLab · 2019-12-19 · $12,000 Privilege Escalation From user to SYSTEM via unauthenticated command executionUbiquiti Inc. · 2019-11-08 BAD Code !Paragon Initiative Enterprises · 2016-11-04 Local files could be overwritten in GitLab, leading to remote command executionGitLab · 2019-07-17 · $12,000