CVE-2023-23762

MEDIUM Year: 2023
CVSS v3 Score
5.3
Medium
Weakness Type
CWE-697
View all →

Vulnerability Description

An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff. To do so, an attacker would need write access to the repository and be able to correctly guess the target branch before it’s created by the code maintainer. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.9 and was fixed in versions 3.4.18, 3.5.15, 3.6.11, 3.7.8, and 3.8.1. This vulnerability was reported via the GitHub Bug Bounty program.

Related Vulnerabilities

CVE-2015-6964

MEDIUM
CVSS:5.3(Medium)

MultiBit HD before 0.1.2 allows attackers to conduct bit-flipping attacks that insert unspendable Bitcoin addresses into the list that MultiBit uses to send fees to the developers. (Attackers cannot r...

CWE-6972015

CVE-2015-9238

MEDIUM
CVSS:5.3(Medium)

secure-compare 3.0.0 and below do not actually compare two strings properly. compare was actually comparing the first argument with itself, meaning the check passed for any two strings of the same len...

CWE-6972015

CVE-2020-25580

MEDIUM
CVSS:5.3(Medium)

In FreeBSD 12.2-STABLE before r369346, 11.4-STABLE before r369345, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 a regression in the login.access(5) rule processor has the effect of causing rules ...

CWE-6972020

CVE-2021-34141

MEDIUM
CVSS:5.3(Medium)

An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor stat...

CWE-6972021

CVE-2022-23027

MEDIUM
CVSS:5.3(Medium)

On BIG-IP versions 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, 13.1.x beginning in 13.1.3.6, 12.1.5.3-12.1.6, and 11.6.5.2, when a FastL4 profile and an HTTP, FIX, and/or hash persistence profile ar...

CWE-6972022

CVE-2022-29944

MEDIUM
CVSS:5.3(Medium)

An issue was discovered in ONOS 2.5.1. There is an incorrect comparison of paths installed by intents. An existing intents does not redirect to a new path, even if a new intent that shares the path wi...

CWE-6972022