CVE-2024-5795CWE-400

Denial of Service vulnerability was identified in GitHub Enterprise Server that allowed resource exhaustion

High · published July 16, 2024

CVSS v3.1
7.7
EPSS
1%
Percentile
45.7
In the wild
Unconfirmed
What it is

A Denial of Service vulnerability was identified in GitHub Enterprise Server that allowed an attacker to cause unbounded resource exhaustion by sending a large payload to the Git server. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.14 and was fixed in version 3.13.1, 3.12.6, 3.11.12, 3.10.14, and 3.9.17. This vulnerability was reported via the GitHub Bug Bounty program.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00557 · 45.7th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2024-07-16T21:26Z
EPSS history
Timeline
  • 16 JUL 21:26Z
    Denial of Service vulnerability was identified in GitHub Enterprise Server that allowed resource exhaustion
    cvelistv5