Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
GitHub Enterprise before 20120304 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set the public_key[user_id] value via a modified URL for the public-key update form, related to a "mass assignment" vulnerability.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GitHub Enterprise信任管理漏洞
Vulnerability Description
GitHub Enterprise 20120304之前版本中存在漏洞，该漏洞源于未正确限制为模型提供属性值的哈希函数的使用。远程攻击者可利用该漏洞借助已修改的URL（更新公钥表单的URL）设置public_key[user_id]值。该漏洞与“mass assignment”相关。
CVSS Information
N/A
Vulnerability Type
N/A