Gitlab Dynamic Application Security Testing Analyzer
4 CVEs affecting Gitlab Dynamic Application Security Testing Analyzer. Latest disclosed: 2023-03-27. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-3767 | High | 7.7 | 2023-03-09 | Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless… |
CVE-2023-0326 | Medium | 5.0 | 2023-03-27 | An issue has been discovered in GitLab DAST API scanner affecting all versions starting from 1.6.50 before 2.11.0, where Authorization headers was leaked in vu… |
CVE-2022-4317 | Medium | 5.0 | 2023-03-09 | An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which sends custom request headers in redirects. |
CVE-2022-4315 | Medium | 5.0 | 2023-03-08 | An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 2.0 before 3.0.55, which sends custom request headers with every requ… |