CyberRota Analysis
AI-GeneratedA path traversal vulnerability in GitHub Enterprise Server allows an attacker with code execution in the Dependabot updater container to write files to arbitrary repository paths, including sensitive GitHub Actions workflow files. This could lead to unauthorized execution of injected workflows with access to repository secrets, particularly if the repository uses a pull_request_target workflow or has auto-merge enabled. Organizations using affected versions of GitHub Enterprise Server should prioritize patching to versions 3.21.3, 3.20.5, 3.19.9, 3.18.12, or 3.17.18 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an attacker who had code execution inside the Dependabot updater container to write files to arbitrary repository paths, including GitHub Actions workflow files under .github/workflows/ as the path validation did not check the effective path which the attacker could control through the dependency file's directory and symlink target. If the repository used a pull_request_target workflow or had auto-merge enabled, an injected workflow could execute with access to the repository's GitHub Actions secrets. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.22 and was fixed in versions 3.21.3, 3.20.5, 3.19.9, 3.18.12, 3.17.18.