CVE-2023-23766

MEDIUM Year: 2023
CVSS v3 Score
6.5
Medium
Weakness Type
CWE-697
View all →

Vulnerability Description

An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff in a re-opened Pull Request. To do so, an attacker would need write access to the repository. This vulnerability affected all versions of GitHub Enterprise Server and was fixed in versions 3.6.17, 3.7.15, 3.8.8, 3.9.3, and 3.10.1. This vulnerability was reported via the GitHub Bug Bounty program.

Related Vulnerabilities

CVE-2020-15811

MEDIUM
CVSS:6.5(Medium)

An issue was discovered in Squid before 4.13 and 5.x before 5.0.4. Due to incorrect data validation, HTTP Request Splitting attacks may succeed against HTTP and HTTPS traffic. This leads to cache pois...

CWE-6972020

CVE-2021-38364

MEDIUM
CVSS:6.5(Medium)

An issue was discovered in ONOS 2.5.1. There is an incorrect comparison of flow rules installed by intents. A remote attacker can install or remove a new intent, and consequently modify or delete the ...

CWE-6972021

CVE-2021-39514

MEDIUM
CVSS:6.5(Medium)

An issue was discovered in libjpeg through 2020021. An uncaught floating point exception in the function ACLosslessScan::ParseMCU() located in aclosslessscan.cpp. It allows an attacker to cause Denial...

CWE-6972021

CVE-2021-39917

MEDIUM
CVSS:6.5(Medium)

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. A re...

CWE-6972021

CVE-2022-22203

MEDIUM
CVSS:6.5(Medium)

An Incorrect Comparison vulnerability in PFE of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a Denial of Service (DoS). On QFX5000 Series, and EX4600 and EX4650 platf...

CWE-6972022

CVE-2022-41317

MEDIUM
CVSS:6.5(Medium)

An issue was discovered in Squid 4.9 through 4.17 and 5.0.6 through 5.6. Due to inconsistent handling of internal URIs, there can be Exposure of Sensitive Information about clients using the proxy via...

CWE-6972022