CVE-2023-6690
LOW3.9CVSS v3
—CVSS v2
0.09%
EPSS (exploit probability)
CWE-367CWE
Description
A race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on transferred repositories by making a GraphQL mutation to alter repository permissions during the transfer. This vulnerability affected GitHub Enterprise Server version 3.8.0 and above and was fixed in version 3.8.12, 3.9.7, 3.10.4, and 3.11.1.
CVSS v3 vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L
Affected routers (0)
No routers currently mapped to this CVE in our database.