CVE-2024-5815: 
GitHub Enterprise Server vulnerability analysis and mitigation

A Cross-Site Request Forgery (CSRF) vulnerability was discovered in GitHub Enterprise Server that allowed write operations on a victim-owned repository. The vulnerability required the attacker to be a trusted user and the victim had to visit a tag in the attacker's fork of their own repository (GitHub Release Notes).

The vulnerability involves incorrect request types that could be exploited to perform write operations on victim-owned repositories through a CSRF attack. The attack requires specific conditions where the attacker must be a trusted user and the victim needs to interact with a tag in the attacker's forked repository (GitHub Release Notes).

If successfully exploited, an attacker could perform unauthorized write operations on repositories owned by the victim, potentially modifying repository content or settings (GitHub Release Notes).

GitHub has patched this vulnerability in their Enterprise Server releases. Organizations should upgrade to the latest version of GitHub Enterprise Server to receive the security fix (GitHub Release Notes).