GitHub's Enterprise Server 3.13.3 addresses critical security vulnerabilities, notably a flaw in SAML SSO that could grant unauthorized access to admin accounts, alongside various enhancements.
CVE-2024-6800 presents a significant risk as it enables attackers to forge SAML responses, potentially giving them administrative access. This was discovered via GitHub’s Bug Bounty program.
The update also mitigates medium-severity vulnerabilities like CVE-2024-7711 and CVE-2024-6337, which allowed modifications to issues in public repositories and exposure of private repository contents, respectively.
Beyond security, Enterprise Server 3.13.3 enhances user experience with improved visibility for gists, networks, and wikis, offering users better insights through new commands and diagnostics.
[
Collection
]
[
|
...
]