R31n

WatchGuard Agent path traversal allows unauthenticated remote code execution

Path traversal in GitHub Enterprise Server allowed unauthenticated deletion of instance storage via the X-GitHub-Request-Id header

Server-Side Request Forgery in GitHub Enterprise Server via Advisory Package URL Endpoint

Server-side request forgery vulnerability in GitHub Enterprise Server notebook viewer via URL parser confusion

Server-Side Request Forgery in GitHub Enterprise Server allowed extraction of sensitive environment variables via timing side-channel attack

Improper Handling of HTTP Redirects vulnerability was identified in GitHub Enterprise Server that allowed leaking of authorization token and enabled remote code execution

Pre-Receive Hook Remote Code Execution vulnerability was identified in GitHub Enterprise Server that allowing Privilege Escalation

Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

A Cross-Site Scripting (XSS) vulnerability was identified in the repository transfer feature of GitHub Enterprise Server, which allows attackers to steal sensitive user information via social engineering. This vulnerability affected all versions of GitHub