CVE-2024-3684

A server side request forgery vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin access to the appliance when configuring the Artifacts & Logs and Migrations Storage. Exploitation of this vulnerability required access to the GitHub Enterprise Server instance and access to the Management Console with the editor role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12 and was fixed in versions 3.12.2, 3.11.8, 3.10.10, and 3.9.13. This vulnerability was reported via the GitHub Bug Bounty program.

• CWE-88

• https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.10Release Notes
• https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.8Release Notes
• https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.12.2Release Notes
• https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.13Release Notes
• https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.10Release Notes
• https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.8Release Notes
• https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.12.2Release Notes
• https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.13Release Notes

Published

Apr 19, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-36823The encrypt() function of Ninja Core v7.0.0 was discovered t…7.5
• CVE-2024-36827An XML External Entity (XXE) vulnerability in the ebookmeta.…7.5
• CVE-2024-36829Incorrect access control in Teldat M1 v11.00.05.50.01 allows…7.5
• CVE-2024-36831A NULL pointer dereference in the plugins_call_handle_uri_cl…5.3
• CVE-2024-36832A NULL pointer dereference in D-Link DAP-1513 REVA_FIRMWARE_…7.5
• CVE-2024-36837SQL Injection vulnerability in CRMEB v.5.2.2 allows a remote…7.5
• CVE-2024-36840SQL Injection vulnerability in Boelter Blue System Managemen…9.1
• CVE-2024-36842An issue in Oncord+ Android Infotainment Systems OS Android …7.3
• CVE-2024-36843libmodbus v3.1.6 was discovered to contain a heap overflow v…7.5
• CVE-2024-36844libmodbus v3.1.6 was discovered to contain a use-after-free …7.5
• CVE-2024-36845An invalid pointer in the modbus_receive() function of libmo…4.3
• CVE-2024-3685A vulnerability, which was classified as critical, was found…9.8