🎯 New Report #3713965: Able to bypass authorization logic and gain more access then intended
🔺Severity: Medium
👽 Reporter: vaib25vicky
⭐️ Reputation: 2753
🛠 State: resolved
💼 Team: GitHub
💵 Bounty: null
🕐 Submitted: 2026-05-05
⏰ Disclosed: 2026-07-15 16:35:57
📝 Summary: A UI misrepresentation vulnerability was identified in GitHub Enterprise Server that allowed an OAuth application to gain unintended access to an organization's runner management. The vulnerability was fixed in versions 3.21.2, 3.20.4, 3.19.8, 3.18.11, 3.17.17, and 3.16.20. This vulnerability was reported via the GitHub Bug Bounty program.
📂 Report JSON File: 3713965
@hackeronereports