CVE-2022-23741

An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a scoped user-to-server token to escalate to full admin/owner privileges. An attacker would require an account with admin access to install a malicious GitHub App. This vulnerability was fixed in versions 3.3.17, 3.4.12, 3.5.9, and 3.6.5. This vulnerability was reported via the GitHub Bug Bounty program.

• CWE-863
• CWE-863

• https://docs.github.com/en/enterprise-server%403.3/admin/release-notes#3.3.17
• https://docs.github.com/en/enterprise-server%403.4/admin/release-notes#3.4.12
• https://docs.github.com/en/enterprise-server%403.5/admin/release-notes#3.5.9
• https://docs.github.com/en/enterprise-server%403.6/admin/release-notes#3.6.5
• https://docs.github.com/en/enterprise-server%403.3/admin/release-notes#3.3.17
• https://docs.github.com/en/enterprise-server%403.4/admin/release-notes#3.4.12
• https://docs.github.com/en/enterprise-server%403.5/admin/release-notes#3.5.9
• https://docs.github.com/en/enterprise-server%403.6/admin/release-notes#3.6.5

Published

Dec 14, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-23734A deserialization of untrusted data vulnerability was identi…8.8
• CVE-2022-23737An improper privilege management vulnerability was identifie…6.5
• CVE-2022-23738An improper cache key vulnerability was identified in GitHub…5.7
• CVE-2022-23739An incorrect authorization vulnerability was identified in G…9.8
• CVE-2022-2374The Simply Schedule Appointments WordPress plugin before 1.5…4.8
• CVE-2022-23740CRITICAL: An improper neutralization of argument delimiters …8.8
• CVE-2022-23742Check Point Endpoint Security Client for Windows versions ea…7.8
• CVE-2022-23743Check Point ZoneAlarm before version 15.8.200.19118 allows a…7.8
• CVE-2022-23744Check Point Endpoint before version E86.50 failed to protect…2.3
• CVE-2022-23745A potential memory corruption issue was found in Capsule Wor…7.5
• CVE-2022-23746The IPsec VPN blade has a dedicated portal for downloading a…7.5
• CVE-2022-23747In Sony Xperia series 1, 5, and Pro, an out of bound memory …9.8