Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: GitLab Component: Dynamic Application Security Testing Analyzer Clear all filters
TI-2022-03954 CVE-2022-4317 · GHSA-4mvf-qm8g-c6mp

Open redirect in GitLab DAST

Priority MEDIUM 60

An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which sends custom request headers in redirects.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00541 Published 2023-03-09 Fixed in 3.0.51 CWE-601
TI-2022-03458 CVE-2022-3767 · GHSA-5xvv-4r9w-mw22

Improper input validation in GitLab DAST

Priority LOW 35

Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless of the host.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00752 Published 2023-03-09 Fixed in 3.0.32 CWE-20
TI-2022-03953 CVE-2022-4315 · GHSA-342h-3rmj-qwv4

Incorrect authorization in GitLab

Priority MEDIUM 62

An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 2.0 before 3.0.55, which sends custom request headers with every request on the authentication page.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00805 Published 2023-03-08 Fixed in 3.0.55 CWE-863