Feed/CVE-2025-3246
CVE-2025-3246HIGHCVSS 7.6

CVE-2025-3246

Published Apr 17, 2025·Updated Jun 17, 2026

NVD Description

An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed cross-site scripting in GitHub Markdown that used `$$..$$` math blocks. Exploitation required access to the target GitHub Enterprise Server instance and privileged user interaction with the malicious elements. This vulnerability affected version 3.16.1 of GitHub Enterprise Server and was fixed in version 3.16.2. This vulnerability was reported via the GitHub Bug Bounty program.

Public Exploits & PoCs10 found

[POC] CVE-2025-32462 — CVE-2025-32462

A easy sudo poc by cryingn.

2

[POC] CVE-2025-32462 — CVE-2025-32462

Exploit for CVE-2025-32462

1

[POC] CVE-2025-32462 — CVE-2025-32462-

CVE-2025-32462 is a local privilege escalation vulnerability in sudo

[POC] CVE-2025-32462 — CVE-Analysis

CVE-2025-32462 & CVE-2025-32463

[POC] CVE-2025-32462 — CVE-2025-32462

The vulnerability was found by Rich Mirch. More details on it here: https://cxsecurity.com/issue/WLB-2025070022

[POC] CVE-2025-32462 — CVE-2025-32462-32463-Detection-Script-

Critical Sudo Vulnerabilities Let Local Users Gain Root Access on Linux, Impacting Major Distros

[POC] CVE-2025-32462 — CVE-2025-32462_32463-Lab

Docker PoC for CVE-2025-32462 & CVE-2025-32463 (sudo), based on Stratascale CRU research.

[POC] CVE-2025-32462 — cve-2025-32462

cve-2025-32462' demo

[POC] CVE-2025-32462 — CVE-2025-32462-POC

🔓 Local privilege escalation PoC for CVE-2025-32462 (sudo -h bypass) – gain root via misconfigured sudoers

[POC] CVE-2025-32462 — CVE-2025-32462

CVE-2025-32462 exploit code

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free