CVE-2024-0507 PoC — Privilege Escalation by Code Injection in the Management Console in GitHub Enterprise Server

Source

https://github.com/convisolabs/CVE-2024-0507_CVE-2024-0200-github

Associated Vulnerability

Title: Privilege Escalation by Code Injection in the Management Console in GitHub Enterprise Server (CVE-2024-0507)
Description:An attacker with access to a Management Console user account with the editor role could escalate privileges through a command injection vulnerability in the Management Console. This vulnerability affected all versions of GitHub Enterprise Server and was fixed in versions 3.11.3, 3.10.5, 3.9.8, and 3.8.13 This vulnerability was reported via the GitHub Bug Bounty program.

Description

Exploits for GitHub Enterprise CVE-2024-0507 and CVE-2024-0200

Readme

# Intro

This repository contains exploits we have developed for GitHub Enterprise vulnerabilities CVE-2024-0507 and CVE-2024-0200.

Check out the full writeup at https://blog.convisoappsec.com/en/analysis-of-github-enterprise-vulnerabilities-cve-2024-0507-cve-2024-0200/

# CVE-2024-0507

Privilege Escalation by Code Injection in the Management Console in GitHub Enterprise Server

![CVE-2024-0507](./assets/CVE-2024-0507.png).

# CVE-2024-0200

Unsafe Reflection in Github Enterprise Server leading to Command Injection

![CVE-2024-0200](./assets/CVE-2024-0200.gif).

# References

1. https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.3-security-fixes
2. https://www.cve.org/cverecord?id=CVE-2024-0507
3. https://www.cve.org/cverecord?id=CVE-2024-0200

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →