Exploit for Unsafe Reflection in Github Enterprise Server CVE-2024-0200 CVE-2024-0507

## https://sploitus.com/exploit?id=1E764BC7-8CB9-56AB-9C75-4D67987CC760
# Intro

This repository contains exploits we have developed for GitHub Enterprise vulnerabilities CVE-2024-0507 and CVE-2024-0200.

Check out the full writeup at https://blog.convisoappsec.com/en/analysis-of-github-enterprise-vulnerabilities-cve-2024-0507-cve-2024-0200/

# CVE-2024-0507

Privilege Escalation by Code Injection in the Management Console in GitHub Enterprise Server

![CVE-2024-0507](./assets/CVE-2024-0507.png).

# CVE-2024-0200

Unsafe Reflection in Github Enterprise Server leading to Command Injection

![CVE-2024-0200](./assets/CVE-2024-0200.gif).

# References

1. https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.3-security-fixes
2. https://www.cve.org/cverecord?id=CVE-2024-0507
3. https://www.cve.org/cverecord?id=CVE-2024-0200