Skip to content

CVE record · 1 source

CVE-2026-110288

CVSS 5.3

A cross-site request forgery vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete stored Slack…

Vendor: GitHub
Product: Enterprise Server
CVSS v4.0: 5.3 AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness: CWE-352
Exposure class: Collaboration, Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

19

CVE NVD 7d ago

A cross-site request forgery vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete stored Slack…

A cross-site request forgery vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete stored Slack and Microsoft Teams ChatOps configuration and provider credentials by inducing…

CVSS 5.3 Fix available CVE-2026-110288 GitHub