CVE-2023-23765

—

CVSS 3.1

6.5 medium

EPSS

<1%p47

Published

Aug 30, 2023 (Aug 30, 2023)

Modified

Jun 17, 2026

Description

An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff in a re-opened Pull Request. To exploit this vulnerability, an attacker would need write access to the repository. This vulnerability was reported via the GitHub Bug Bounty Program https://bounty.github.com/ .

Vendors: github
Products: enterprise server
Weakness: CWE-697
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.