CVE-2012-2055

GitHub Enterprise before 20120304 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set…

published April 4, 2012

CVSS
—
EPSS
2%
Percentile
78.4
In the wild
Unconfirmed
What it is

GitHub Enterprise before 20120304 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set the public_key[user_id] value via a modified URL for the public-key update form, related to a "mass assignment" vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01817 · 78.4th percentile
Published
2012-04-04T10:00Z
EPSS history
Timeline
  • 04 APR 10:00Z
    GitHub Enterprise before 20120304 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set…
    cvelistv5