CVE-2022-23740

CRITICAL: An improper neutralization of argument delimiters in a command vulnerability was identified in GitHub Enterprise Server that enabled remote code execution. To exploit this vulnerability, an attacker would need permission to create and build GitHub Pages using GitHub Actions. This vulnerability affected only version 3.7.0 of GitHub Enterprise Server and was fixed in version 3.7.1. This vulnerability was reported via the GitHub Bug Bounty program.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://docs.github.com/en/enterprise-server%403.7/admin/release-notes#3.7.1

Configurations

Configuration 1 (hide)

cpe:2.3:a:github:enterprise_server:3.7.0:*:*:*:*:*:*:*

History

30 Nov 2022, 18:11

Type	Values Removed	Values Added
CWE		CWE-88
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 8.8
CPE		cpe:2.3:a:github:enterprise_server:3.7.0:::::::*
References	~~(MISC) https://docs.github.com/en/enterprise-server@3.7/admin/release-notes#3.7.1 -~~	(MISC) https://docs.github.com/en/enterprise-server@3.7/admin/release-notes#3.7.1 - Release Notes, Third Party Advisory

23 Nov 2022, 18:32

Type	Values Removed	Values Added
New CVE

Information

Published : 2022-11-23 18:15

Updated : 2024-02-04 23:14

NVD link : CVE-2022-23740

Mitre link : CVE-2022-23740

CVE.ORG link : CVE-2022-23740

JSON object : View

Products Affected

github

enterprise_server

CWE

CWE-88

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

{"id": "CVE-2022-23740", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2022-11-23T18:15:11.130", "references": [{"url": "https://docs.github.com/en/enterprise-server%403.7/admin/release-notes#3.7.1", "source": "product-cna@github.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-88"}]}, {"type": "Secondary", "source": "product-cna@github.com", "description": [{"lang": "en", "value": "CWE-88"}]}], "descriptions": [{"lang": "en", "value": "CRITICAL: An improper neutralization of argument delimiters in a command vulnerability was identified in GitHub Enterprise Server that enabled remote code execution. To exploit this vulnerability, an attacker would need permission to create and build GitHub Pages using GitHub Actions. This vulnerability affected only version 3.7.0 of GitHub Enterprise Server and was fixed in version 3.7.1. This vulnerability was reported via the GitHub Bug Bounty program."}, {"lang": "es", "value": "CR\u00cdTICO: Se identific\u00f3 una neutralizaci\u00f3n incorrecta de los delimitadores de argumentos en una vulnerabilidad de comando en GitHub Enterprise Server que permit\u00eda la ejecuci\u00f3n remota de c\u00f3digo. Para explotar esta vulnerabilidad, un atacante necesitar\u00eda permiso para crear y compilar p\u00e1ginas de GitHub utilizando GitHub Actions. Esta vulnerabilidad afect\u00f3 solo a la versi\u00f3n 3.7.0 de GitHub Enterprise Server y se solucion\u00f3 en la versi\u00f3n 3.7.1. Esta vulnerabilidad se inform\u00f3 a trav\u00e9s del programa GitHub Bug Bounty."}], "lastModified": "2023-11-07T03:44:18.110", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:github:enterprise_server:3.7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CC0AA188-F17E-4FED-98E9-10CAC3E9797E"}], "operator": "OR"}]}], "sourceIdentifier": "product-cna@github.com"}