TLDR InfoSec · ATTACKS & VULNERABILITIES

YOU PROBABLY WANT TO PATCH THIS CRITICAL GITHUB ENTERPRISE SERVER BUG NOW

theregister.com3 min read

Summary from the TLDR InfoSec newsletter

GitHub Enterprise Server has disclosed a critical bug (CVE-2024-6800) that allows unauthorized admin access affecting SAML-enabled instances using public federation metadata in XML. GitHub addresses the bug and two other medium-severity vulnerabilities in this recent security update.