Lucene search

K
osvGoogleOSV:BIT-GITLAB-2022-2250
HistoryMar 06, 2024 - 11:15 a.m.

BIT-gitlab-2022-2250

2024-03-0611:15:24
Google
osv.dev
3
open redirect vulnerability
gitlab
attack
arbitrary location
url trust

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

38.0%

An open redirect vulnerability in GitLab EE/CE affecting all versions from 11.1 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows an attacker to redirect users to an arbitrary location if they trust the URL.

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

38.0%