Vulnerabilities (CVE)

Filtered by vendor Github Subscribe
Filtered by product Github Enterprise
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2012-2055 1 Github 1 Github Enterprise 2017-12-20 5.0 MEDIUM N/A
GitHub Enterprise before 20120304 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set the public_key[user_id] value via a modified URL for the public-key update form, related to a "mass assignment" vulnerability.