PT-2024-17968 · Github · Github Enterprise Server

Inspector-Ambitious · Published 2024-02-13 · Updated 2025-03-24 · CVE-2024-1355

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GitHub Enterprise Server versions prior to 3.12 GitHub Enterprise Server versions 3.11.5, 3.10.7, 3.9.10, and 3.8.15 are not affected as they contain the fix.

Description A command injection issue was identified in GitHub Enterprise Server, allowing an attacker with an editor role in the Management Console to gain admin SSH access to the appliance via the actions-console docker container while setting a service URL. Exploitation required access to the GitHub Enterprise Server instance and access to the Management Console with the editor role. This issue was reported via the GitHub Bug Bounty program.

Recommendations For GitHub Enterprise Server versions prior to 3.12, update to version 3.11.5, 3.10.7, 3.9.10, or 3.8.15 to resolve the issue. As a temporary workaround, consider restricting access to the Management Console and the actions-console docker container to minimize the risk of exploitation.

Fix

RCE

Command Injection

Weakness Enumeration

CWE-20

CWE-77

Related Identifiers

CVE-2024-1355

Affected Products

Github Enterprise Server

References · 9

• https://osv.dev/vulnerability/CVE-2024-1355 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-1355 · Security Note
• https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.7 · Note
• https://t.me/cvenotify/73067 · Telegram Post
• https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.5 · Note
• https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.15 · Note
• https://twitter.com/CVEnew/status/1757482916324720878 · Twitter Post
• https://t.me/cvenotify/115983 · Telegram Post
• https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.10 · Note