R31n

A Cross-Site Scripting (XSS) vulnerability was identified in the repository transfer feature of GitHub Enterprise Server, which allows attackers to steal sensitive user information via social engineering. This vulnerability affected all versions of GitHub

Improper input validation vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Management Console

A Server-Side Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed an attacker with the Site Administrator role to gain arbitrary code execution capability on the GitHub Enterprise Server instance. Exploitation required au

Improper Privilege Management was identified in GitHub Enterprise Server that allowed privilege escalation in the Management Console

Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Management Console