This vulnerability involves SSRF in GitHub Enterprise Server's notebook viewer component due to inconsistent URL parsing between validation and request handling. An attacker with network access to the server can craft URLs that pass hostname validation but redirect requests to internal services, potentially exposing sensitive internal resources. The issue affects versions 3.16.0 through 3.20.0 and was addressed by GitHub in subsequent patch releases. The CVSS 4.0 score is 7.9, indicating high severity with network attack vector, low attack complexity, and no required privileges or user interaction.

Successful exploitation allows an attacker with network access to the GitHub Enterprise Server instance to make the server perform HTTP requests to unintended internal hosts. This could lead to unauthorized access to internal services that are otherwise inaccessible externally. The vulnerability does not require authentication or user interaction, increasing its risk within accessible network environments. However, no known exploits have been reported in the wild.

A fix is available and has been released in GitHub Enterprise Server versions 3.16.18, 3.17.15, 3.18.9, 3.19.6, and 3.20.2. Users should upgrade to one of these patched versions or later to remediate this vulnerability. Since this is not a cloud service, remediation depends on applying these updates. Patch status is confirmed by the vendor advisory embedded in the description.