GLOBAL SITUATIONMONITORING

517 published briefsUTCThu, May 14 00:00:08

Intelligence Tag

CVE-2025-11892

Specific CVE identifier for a critical vulnerability

1 intelligence brief← Intelligence Hub

Critical XSS Flaw Found in GitHub Enterprise Server: Immediate Update Recommended

A critical DOM-based Cross-Site Scripting (XSS) vulnerability, identified as CVE-2025-11892, has been uncovered in GitHub Enterprise Server, posing a significant risk of privilege escalation and unauthorized workflow triggers. Immediate update to affected systems is highly recommended to mitigate this high-severity flaw.

Elles De Yeager

Nov 11, 2025

1–2 minutes