← 返回地图
破甲
浏览
CVE
测试载荷
绕过技巧
API
接入 AI
关于
Privilege Escalation to Root SSH Access via Pre-Receive Hook Environment in GitHub Enterprise Server
访问控制
/
Unlabeled
/ #2336236
厂商
GitHub
严重程度
中危
赏金
—
弱点
Unlabeled
研究员
@inspector-ambitious
披露日期
2024-09-13
资产
GitHub Enterprise Server
CVE
CVE-2024-2469
该报告还没有中文解读。
时间线
2024-01-26
报告提交
2024-09-13
公开披露
阅读 HackerOne 原文 ↗
作者 @inspector-ambitious · 版权归作者与 GitHub 所有
同类报告
Email Confirmation Bypass in myshop.myshopify.com that Leads to Full Privilege Escalation to Any Shop Owner by Taking Advantage of the Shopify SSO
Shopify · 2020-04-01
[Part II] Email Confirmation Bypass in myshop.myshopify.com that Leads to Full Privilege Escalation
Shopify · 2020-04-01
Broken Access Control leads to disclosure of transaction history via /v2/rechargeTransactionHistory endpoint
MTN Group · 2025-03-02
[Mail.Ru Android] Typo in permission name allows to write contacts without user knowledge
Mail.ru · —
Improper State Validation on Sony WH-CH520 via BLE Command Service leads to unauthorized Bluetooth pairing and audio hijacking
Sony · —
Staff without Manage Themes permissions can update themes
Shopify · 2024-01-23