TLDR InfoSec · ATTACKS & VULNERABILITIES
YOU PROBABLY WANT TO PATCH THIS CRITICAL GITHUB ENTERPRISE SERVER BUG NOW
Summary from the TLDR InfoSec newsletter
GitHub Enterprise Server has disclosed a critical bug (CVE-2024-6800) that allows unauthorized admin access affecting SAML-enabled instances using public federation metadata in XML. GitHub addresses the bug and two other medium-severity vulnerabilities in this recent security update.