地图 / Privilege Escalation to Root SSH Access via Pre-Receive Hook Environment in GitHub Enterprise Server

Privilege Escalation to Root SSH Access via Pre-Receive Hook Environment in GitHub Enterprise Server

访问控制 / Unlabeled / #2336236

厂商: GitHub
严重程度: 中危
赏金: —
弱点: Unlabeled
研究员: @inspector-ambitious
披露日期: 2024-09-13
资产: GitHub Enterprise Server
CVE: CVE-2024-2469

该报告还没有中文解读。

时间线

2024-01-26报告提交
2024-09-13公开披露

阅读 HackerOne 原文 ↗作者 @inspector-ambitious · 版权归作者与 GitHub 所有

同类报告

Email Confirmation Bypass in myshop.myshopify.com that Leads to Full Privilege Escalation to Any Shop Owner by Taking Advantage of the Shopify SSOShopify · 2020-04-01 [Part II] Email Confirmation Bypass in myshop.myshopify.com that Leads to Full Privilege EscalationShopify · 2020-04-01 Broken Access Control leads to disclosure of transaction history via /v2/rechargeTransactionHistory endpointMTN Group · 2025-03-02 [Mail.Ru Android] Typo in permission name allows to write contacts without user knowledgeMail.ru · —Improper State Validation on Sony WH-CH520 via BLE Command Service leads to unauthorized Bluetooth pairing and audio hijackingSony · —Staff without Manage Themes permissions can update themesShopify · 2024-01-23