Back to search
CVE-2022-46256
Published: Dec 14, 2022
Modified: Apr 22, 2025
PUBLISHED
Description
A path traversal vulnerability was identified in GitHub Enterprise Server that allowed remote code execution when building a GitHub Pages site. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the instance. This vulnerability was fixed in versions 3.3.17, 3.4.12, 3.5.9, 3.6.5 and 3.7.2. This vulnerability was reported via the GitHub Bug Bounty program.
| Vendor | Product | Versions |
|---|---|---|
GitHub | GitHub Enterprise Server | affected 3.3 - < 3.3.17affected 3.4 - < 3.4.12affected 3.5 - < 3.5.9affected 3.6 - < 3.6.5affected 3.7 - < 3.7.2 |
Weaknesses (CWE)
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now