CVE-2022-23737 | GitHub Enterprise Server up to 3.6.2 API privileges management (EUVD-2022-28673)

A vulnerability, which was classified as critical, was found in GitHub Enterprise Server up to 3.2.19/3.3.14/3.4.9/3.5.6/3.6.2. The impacted element is an unknown function of the component API. The manipulation results in improper privilege management.

This vulnerability is known as CVE-2022-23737. Access to the local network is required for this attack. No exploit is available.

You should upgrade the affected component.