CVE-2025-23369 PoC — Improper Verification of Cryptographic Signature in GitHub Enterprise Server Allows Signature Spoofing by Improper Valid

Source

https://github.com/hakivvi/CVE-2025-23369

Associated Vulnerability

Title: Improper Verification of Cryptographic Signature in GitHub Enterprise Server Allows Signature Spoofing by Improper Validation (CVE-2025-23369)
Description:An improper verification of cryptographic signature vulnerability was identified in GitHub Enterprise Server that allowed signature spoofing for unauthorized internal users. Instances not utilizing SAML single sign-on or where the attacker is not already an existing user were not impacted. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12.14, 3.13.10, 3.14.7, 3.15.2, and 3.16.0. This vulnerability was reported via the GitHub Bug Bounty program.

Description

GitHub Entreprise Server SAML authentication bypass (CVE-2025-23369) exploit

Readme

# CVE-2025-23369

CVE-2025-23369 exploit, write up [here](https://repzret.blogspot.com/2025/02/abusing-libxml2-quirks-to-bypass-saml.html).

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →