PT-2025-4866 · Github · Github Enterprise Server

Hakivvi · Published 2025-01-21 · Updated 2025-09-05 · CVE-2025-23369

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GitHub Enterprise Server versions prior to 3.12.14 GitHub Enterprise Server versions prior to 3.13.10 GitHub Enterprise Server versions prior to 3.14.7 GitHub Enterprise Server versions prior to 3.15.2 GitHub Enterprise Server versions prior to 3.16.0

Description An improper verification of cryptographic signature vulnerability was identified in GitHub Enterprise Server, allowing signature spoofing for unauthorized internal users. This issue affects instances that utilize SAML single sign-on and where the attacker is an existing user. Over 36,000 services are potentially affected. The vulnerability can be exploited by abusing libxml2 quirks to bypass SAML authentication.

Recommendations GitHub Enterprise Server version prior to 3.12.14: Update to version 3.12.14 or later. GitHub Enterprise Server version prior to 3.13.10: Update to version 3.13.10 or later. GitHub Enterprise Server version prior to 3.14.7: Update to version 3.14.7 or later. GitHub Enterprise Server version prior to 3.15.2: Update to version 3.15.2 or later. GitHub Enterprise Server version prior to 3.16.0: Update to version 3.16.0 or later. As a temporary workaround, consider restricting access to SAML authentication until a patch is applied.

Exploit

Fix

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

BDU:2025-02596

CVE-2025-23369

Affected Products

Github Enterprise Server

References · 51

• 🔥 https://github.com/hakivvi/CVE-2025-23369 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-23369 · Security Note
• https://osv.dev/vulnerability/CVE-2025-23369 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-02596 · Security Note
• https://t.me/proxy_bar/2511 · Telegram Post
• https://twitter.com/insuretech_it/status/1920289270771933484 · Twitter Post
• https://twitter.com/cyber_advising/status/1888747455769899348 · Twitter Post
• https://docs.github.com/en/enterprise-server@3.15/admin/release-notes#3.15.2 · Note
• https://twitter.com/S0ufi4n3/status/1888901295525749145 · Twitter Post
• https://twitter.com/akaclandestine/status/1888525396884193735 · Twitter Post
• https://twitter.com/cyb3rf034r3ss/status/1888587800099905675 · Twitter Post
• https://twitter.com/fofabot/status/1889495042383089816 · Twitter Post
• https://twitter.com/piedpiper1616/status/1888427241299914936 · Twitter Post
• https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.12.14 · Note
• https://docs.github.com/en/enterprise-server@3.14/admin/release-notes#3.14.7 · Note