The article provides additional technical details about the vulnerability's impact and exploitation methods, including the ability to access millions of private repositories and the bypassing of sandboxing protections.
| Vendor | Product | Versions |
|---|---|---|
| github | enterprise_server | 3.14.0, 3.15.0, 3.16.0, 3.17.0, 3.18.0, 3.19.0, 3.20.0, 3.18.8, 3.14.25, 3.15.20, 3.16.16, 3.17.13, 3.19.4 |
Updated severity to CRITICAL, added affected versions, and provided a more detailed description of the vulnerability's impact and exploitation methods.
Updated severity to HIGH, CVSS score to 8.7, added affected version 3.18.8, and noted that the vulnerability is exploitable.
Updated description with detailed technical information, changed severity to HIGH, added CVSS estimate of 8.8, and included new affected version 3.20.0.
Initial creation