CVE-2024-2469 HIGH

CVE-2024-2469: Remote Code Execution in GitHub Enterprise Server Allowed Administrators to gain SSH access to the appliance

Vendor Github
Product Enterprise Server
Weakness CWE-20 · Input validation
Published March 20, 2024
Last update April 10, 2025
View on NVD All CVEs

CVSS base score

8.0/10
Attack vector Network
Attack complexity High
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

An attacker with an Administrator role in GitHub Enterprise Server could gain SSH root access via remote code execution. This vulnerability affected GitHub Enterprise Server version 3.8.0 and above and was fixed in version 3.8.17, 3.9.12, 3.10.9, 3.11.7 and 3.12.1. This vulnerability was reported via the GitHub Bug Bounty program.

Key dates

02Disclosure timeline

March 20, 2024 CVE published
April 10, 2025 Record updated