CVE-2023-22381

A code injection vulnerability was identified in GitHub Enterprise Server that allowed setting arbitrary environment variables from a single environment variable value in GitHub Actions when using a Windows based runner. To exploit this vulnerability, an attacker would need existing permission to control the value of environment variables for use with GitHub Actions. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.8.0 and was fixed in versions 3.4.15, 3.5.12, 3.6.8, 3.7.5. This vulnerability was reported via the GitHub Bug Bounty program.

• CWE-94
• CWE-94

• https://docs.github.com/en/enterprise-server@3.4/admin/release-notes#3.4.15Release Notes
• https://docs.github.com/en/enterprise-server@3.5/admin/release-notes#3.5.12Release Notes
• https://docs.github.com/en/enterprise-server@3.6/admin/release-notes#3.6.8Release Notes
• https://docs.github.com/en/enterprise-server@3.7/admin/release-notes#3.7.5Release Notes
• https://docs.github.com/en/enterprise-server@3.8/admin/release-notesRelease Notes
• https://docs.github.com/en/enterprise-server@3.4/admin/release-notes#3.4.15Release Notes
• https://docs.github.com/en/enterprise-server@3.5/admin/release-notes#3.5.12Release Notes
• https://docs.github.com/en/enterprise-server@3.6/admin/release-notes#3.6.8Release Notes
• https://docs.github.com/en/enterprise-server@3.7/admin/release-notes#3.7.5Release Notes
• https://docs.github.com/en/enterprise-server@3.8/admin/release-notesRelease Notes

Published

Mar 2, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-22376Reflected cross-site scripting vulnerability in Wired/Wirele…6.1
• CVE-2023-22377Improper restriction of XML external entity reference (XXE) …7.4
• CVE-2023-22378A blind SQL Injection vulnerability in Nozomi Networks Guard…6.5
• CVE-2023-22379Improper input validation in some Intel(R) Server Board BMC …5.5
• CVE-2023-2238Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-22380A path traversal vulnerability was identified in GitHub Ente…6.5
• CVE-2023-22382Weak configuration in Automotive while VM is processing a li…8.2
• CVE-2023-22383Memory Corruption in camera while installing a fd for a part…7.8
• CVE-2023-22384Memory Corruption in VR Service while sending data using Fas…7.8
• CVE-2023-22385Memory Corruption in Data Modem while making a MO call or MT…9.8
• CVE-2023-22386Memory Corruption in WLAN HOST while processing WLAN FW requ…7.8
• CVE-2023-22387Arbitrary memory overwrite when VM gets compromised in TX wr…7.8