{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-01T10:00:22.999","vulnerabilities":[{"cve":{"id":"CVE-2022-23740","sourceIdentifier":"product-cna@github.com","published":"2022-11-23T18:15:11.130","lastModified":"2026-06-17T04:30:44.133","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"CRITICAL: An improper neutralization of argument delimiters in a command vulnerability was identified in GitHub Enterprise Server that enabled remote code execution. To exploit this vulnerability, an attacker would need permission to create and build GitHub Pages using GitHub Actions. This vulnerability affected only version 3.7.0 of GitHub Enterprise Server and was fixed in version 3.7.1. This vulnerability was reported via the GitHub Bug Bounty program."},{"lang":"es","value":"CRÍTICO: Se identificó una neutralización incorrecta de los delimitadores de argumentos en una vulnerabilidad de comando en GitHub Enterprise Server que permitía la ejecución remota de código. Para explotar esta vulnerabilidad, un atacante necesitaría permiso para crear y compilar páginas de GitHub utilizando GitHub Actions. Esta vulnerabilidad afectó solo a la versión 3.7.0 de GitHub Enterprise Server y se solucionó en la versión 3.7.1. Esta vulnerabilidad se informó a través del programa GitHub Bug Bounty."}],"affected":[{"source":"product-cna@github.com","affectedData":[{"vendor":"GitHub","product":"GitHub Enterprise Server","versions":[{"version":"3.7","lessThan":"3.7.1","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-28T14:17:42.356024Z","id":"CVE-2022-23740","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"product-cna@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-88"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-88"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:github:enterprise_server:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"CC0AA188-F17E-4FED-98E9-10CAC3E9797E"}]}]}],"references":[{"url":"https://docs.github.com/en/enterprise-server%403.7/admin/release-notes#3.7.1","source":"product-cna@github.com"},{"url":"https://docs.github.com/en/enterprise-server%403.7/admin/release-notes#3.7.1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}