CyberRota Analysis
AI-GeneratedA time-of-check time-of-use race condition vulnerability in GitHub Enterprise Server allows authenticated users with write access to execute remote code through carefully timed concurrent upload requests. This high-severity flaw impacts all versions prior to 3.22 and necessitates immediate attention from organizations using affected versions to mitigate potential exploitation risks. Users should prioritize upgrading to fixed versions 3.17.20, 3.18.14, 3.19.11, 3.20.7, 3.21.5, or 3.22.0 to ensure security.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A time-of-check time-of-use race condition vulnerability was identified in GitHub Enterprise Server that allowed remote code execution. Exploitation required an authenticated user with write access to a repository and precise timing of concurrent upload requests. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.22 and was fixed in versions 3.17.20, 3.18.14, 3.19.11, 3.20.7, and 3.21.5. This vulnerability was reported via the GitHub Bug Bounty program.
Related CVEs
Other vulnerabilities affecting the same vendor(s)