CVE-2024-5566

An improper privilege management vulnerability allowed users to migrate private repositories without having appropriate scopes defined on the related Personal Access Token. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.14 and was fixed in version 3.13.1, 3.12.6, 3.11.12, 3.10.14, and 3.9.17.

• CWE-269

• https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.14Release Notes
• https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.10Release Notes
• https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.12.6Release Notes
• https://docs.github.com/en/enterprise-server@3.13/admin/release-notes#3.13.1Release Notes
• https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.17Release Notes
• https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.14Release Notes
• https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.10Release Notes
• https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.12.6Release Notes
• https://docs.github.com/en/enterprise-server@3.13/admin/release-notes#3.13.1Release Notes
• https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.17Release Notes

Published

Jul 16, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-55653PwnDoc is a penetration test report generator. In versions u…6.5
• CVE-2024-55655sigstore-python is a Python tool for generating and verifyin…2.7
• CVE-2024-55656RedisBloom adds a set of probabilistic data structures to Re…8.8
• CVE-2024-55657SiYuan is a personal knowledge management system. Prior to v…7.5
• CVE-2024-55658SiYuan is a personal knowledge management system. Prior to v…7.5
• CVE-2024-55659SiYuan is a personal knowledge management system. Prior to v…5.4
• CVE-2024-55660SiYuan is a personal knowledge management system. Prior to v…9.8
• CVE-2024-55661Laravel Pulse is a real-time application performance monitor…8.8
• CVE-2024-55662XWiki Platform is a generic wiki platform. Starting in versi…8.8
• CVE-2024-55663XWiki Platform is a generic wiki platform. Starting in versi…9.8
• CVE-2024-5567The Betheme theme for WordPress is vulnerable to Stored Cros…5.4
• CVE-2024-5569A Denial of Service (DoS) vulnerability exists in the jaraco…6.2