Lucene search
+L

167 matches found

Cvelist
Cvelist
•added 2023/03/09 12:00 a.m.•41 views

CVE-2022-3767

Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless of the host...

7.7CVSS7.8AI score0.00752EPSS
SaveExploits1References2
OSV
OSV
•added 2023/03/09 12:00 a.m.•34 views

CVE-2022-4317

An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which sends custom request headers in redirects...

5CVSS6.3AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/09 12:00 a.m.•3 views

CVE-2022-4317: URL Redirection to Untrusted Site

An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which sends custom request headers in redirects...

6.1CVSS5.6AI score0.00541EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/03/09 12:00 a.m.•15 views

CVE-2022-3767

Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless of the host...

7.7CVSS7.5AI score0.00752EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/09 12:00 a.m.•1 views

CVE-2022-3767: Improper Input Validation

Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless of the host...

7.7CVSS5.8AI score0.00752EPSS
SaveExploits1References2
OSV
OSV
•added 2023/03/09 12:00 a.m.•26 views

CVE-2022-3767

Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless of the host...

7.7CVSS6.9AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2023/03/09 12:00 a.m.•33 views

CVE-2022-4317

An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which sends custom request headers in redirects...

5CVSS6.3AI score0.00541EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/03/09 12:00 a.m.•15 views

CVE-2022-4317

An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which sends custom request headers in redirects...

5CVSS6.1AI score0.00541EPSS
SaveExploits1References3
CVE
CVE
•added 2023/03/09 12:00 a.m.•94 views

CVE-2022-4317

CVE-2022-4317 affects GitLab DAST analyzer versions 1.47 through 3.0.50, due to sending custom request headers in redirects. Impact details are not explicitly stated in the provided docs. Remediation: upgrade to version 3.0.51 or later. Exploitation status is not provided in the connected sources.

6.1CVSS6AI score0.00541EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2023/03/09 12:00 a.m.•94 views

CVE-2022-3767

GitLab CVE-2022-3767 affects the DAST analyzer in GitLab where missing validation allows custom request headers to be sent with every request, regardless of host, for all versions 1.11.0 up to 3.0.31. The impact includes potential exposure of sensitive data (confidentiality impact) as indicated b...

7.7CVSS6.2AI score0.00752EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
•added 2023/03/09 12:00 a.m.•89 views

CVE-2022-3767

Removed by vendor...

7.7CVSS6.9AI score0.00752EPSS
SaveExploits1
NVD
NVD
•added 2023/03/08 11:15 p.m.•33 views

CVE-2022-4315

An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 2.0 before 3.0.55, which sends custom request headers with every request on the authentication page...

6.5CVSS5.6AI score0.00805EPSS
SaveExploits1References3
Prion
Prion
•added 2023/03/08 11:15 p.m.•28 views

Authentication flaw

An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 2.0 before 3.0.55, which sends custom request headers with every request on the authentication page...

4CVSS6.4AI score0.00805EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2023/03/08 12:00 a.m.•85 views

CVE-2022-4315

GitLab DAST analyzer (versions 2.0 up to, but not including, 3.0.55) is affected by CVE-2022-4315. The issue arises from the analyzer sending custom request headers with every request on the authentication page. This has been characterized with a CVSS baseline of 6.5 (MEDIUM) by NVD, with Network...

6.5CVSS6.3AI score0.00805EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2023/03/08 12:00 a.m.•35 views

CVE-2022-4315

An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 2.0 before 3.0.55, which sends custom request headers with every request on the authentication page...

5CVSS6.6AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2023/03/08 12:00 a.m.•37 views

CVE-2022-4315

An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 2.0 before 3.0.55, which sends custom request headers with every request on the authentication page...

5CVSS6.6AI score0.00805EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/03/08 12:00 a.m.•12 views

CVE-2022-4315

An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 2.0 before 3.0.55, which sends custom request headers with every request on the authentication page...

5CVSS6.4AI score0.00805EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/03/08 12:00 a.m.•17 views

GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab DAST analyzer version 2.0 up to and...

6.5CVSS6.5AI score0.00805EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/08 12:00 a.m.•1 views

CVE-2022-4315: Incorrect Authorization

An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 2.0 before 3.0.55, which sends custom request headers with every request on the authentication page...

6.5CVSS5.7AI score0.00805EPSS
SaveExploits1References3
NVD
NVD
•added 2023/02/01 3:15 a.m.•35 views

CVE-2022-4206

A sensitive information leak issue has been discovered in all versions of DAST API scanner from 1.6.50 prior to 2.0.102, exposing the Authorization header in the vulnerability report...

6.5CVSS5.8AI score0.00636EPSS
SaveExploits1References2
Rows per page
Query Builder