CVE-2026-9312
HighCVSS 8.2Exploitation Probability (EPSS)
Very high risk93th percentile - higher than 93% of all known CVEs
Summary
GitHub Enterprise Server prior to version 3.22 has an SSRF vulnerability in an upload endpoint that allows an unauthenticated attacker to send crafted requests to internal services. By injecting path traversal content into request parameters, an attacker can bypass the intended request flow and redirect internal API calls.
Risk Assessment
An attacker can access internal services and potentially expose sensitive credentials, posing a serious threat to infrastructure security.
Recommendation
Immediately update GitHub Enterprise Server to one of the following versions: 3.17.17, 3.18.11, 3.19.8, 3.20.4, or 3.21.2.
Original NVD description (English source)
A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to send crafted requests to internal services by exploiting insufficient input validation in an upload endpoint. By injecting path traversal content into request parameters, an attacker could bypass the intended request flow and redirect internal API calls, potentially accessing internal services and exposing sensitive credentials. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.22 and was fixed in versions 3.17.17, 3.18.11, 3.19.8, 3.20.4, and 3.21.2. This vulnerability was reported via the GitHub Bug Bounty program.