R31n

GitHub Enterprise Server notebook viewer vulnerable to Server-side request forgery

Server-Side Request Forgery vulnerability in GitHub Enterprise Server allowed remote code execution via network access from pre-receive hooks to internal services

WatchGuard Agent path traversal allows unauthenticated remote code execution

Path traversal in GitHub Enterprise Server allowed unauthenticated deletion of instance storage via the X-GitHub-Request-Id header

Server-Side Request Forgery in GitHub Enterprise Server via Advisory Package URL Endpoint

Server-side request forgery vulnerability in GitHub Enterprise Server notebook viewer via URL parser confusion

Server-Side Request Forgery in GitHub Enterprise Server allowed extraction of sensitive environment variables via timing side-channel attack

Improper Handling of HTTP Redirects vulnerability was identified in GitHub Enterprise Server that allowed leaking of authorization token and enabled remote code execution

Pre-Receive Hook Remote Code Execution vulnerability was identified in GitHub Enterprise Server that allowing Privilege Escalation

Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console