🎯 New Report #3506183: Missing Access Control in MigrationFile allows attacker to upload files to any Migration
🔺Severity: High
👽 Reporter: ahacker1
⭐️ Reputation: 6459
🛠 State: resolved
💼 Team: GitHub
💵 Bounty: null
🕐 Submitted: 2026-01-10
⏰ Disclosed: 2026-03-05 02:23:08
📝 Summary: A Missing Authorization vulnerability was identified in GitHub Enterprise Server that allowed unauthorized content to be uploaded to a user's repository migration export due to a missing authorization check in the repository migration upload endpoint. The vulnerability could be exploited by supplying the migration identifier to overwrite or replace a victim's migration archive.
📂 Report JSON File: 3506183
@hackeronereports