PT-2023-16958 · Gitlab · Gitlab Dast Api Scanner +1

Name of the Vulnerable Software and Affected Versions: GitLab DAST scanner versions 3.0.29 through 4.0.5 Description: An issue has been discovered in the GitLab DAST scanner where it leaks cross-site cookies on redirect during authorization. Recommendations: For versions 3.0.29 through 4.0.5,...

CakeFuzzer - Automatically And Continuously Discover Vulnerabilities In Web Applications Created Based On Specific Frameworks

Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives. Currently it is implemented to support the Cake PHP framework. If you would like to learn more about t...

Information Disclosure

gitlab is vulnerable to Information Disclosure. Missing validation in DAST analyzer allows custom request headers to be sent with every request, regardless of the host...

PT-2023-17144 · Gitlab · Gitlab Dast Api Scanner

Name of the Vulnerable Software and Affected Versions: GitLab DAST API scanner versions 1.6.50 through 2.10.x Description: An issue has been discovered in the GitLab DAST API scanner where Authorization headers were leaked in vulnerability report evidence. Recommendations: For versions 1.6.50...

CVE-2023-0326

An issue has been discovered in GitLab DAST API scanner affecting all versions starting from 1.6.50 before 2.11.0, where Authorization headers was leaked in vulnerability report evidence...

Authorization

An issue has been discovered in GitLab DAST API scanner affecting all versions starting from 1.6.50 before 2.11.0, where Authorization headers was leaked in vulnerability report evidence...

CVE-2023-0326

Summary of CVE-2023-0326 (GitLab DAST API Scanner): Affects GitLab DAST API scanner versions 1.6.50 through 2.11.0. The root cause is leakage of Authorization headers in vulnerability report evidence, exposing credentials in reports. Documented impact is access to sensitive authorization data via...

PT-2023-16180 · Gitlab · Gitlab Dast Api Scanner

Name of the Vulnerable Software and Affected Versions: GitLab DAST API scanner versions 1.6.50 through 2.11.0 Description: An issue has been discovered in the GitLab DAST API scanner where Authorization headers were leaked in vulnerability report evidence. Recommendations: For GitLab DAST API...

CVE-2023-0326

An issue has been discovered in GitLab DAST API scanner affecting all versions starting from 1.6.50 before 2.11.0, where Authorization headers was leaked in vulnerability report evidence...

CVE-2023-0326

An issue has been discovered in GitLab DAST API scanner affecting all versions starting from 1.6.50 before 2.11.0, where Authorization headers was leaked in vulnerability report evidence...

CVE-2023-0326

An issue has been discovered in GitLab DAST API scanner affecting all versions starting from 1.6.50 before 2.11.0, where Authorization headers was leaked in vulnerability report evidence...

CVE-2022-3767

Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless of the host...

Input validation

Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless of the host...

CVE-2022-3767

Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless of the host...

CVE-2022-4317

An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which sends custom request headers in redirects...

Cross site request forgery (csrf)

An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which sends custom request headers in redirects...

CVE-2022-3767

Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless of the host...

CVE-2022-3767

Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless of the host...

PT-2023-14180 · Gitlab · Gitlab Dast Analyzer

Name of the Vulnerable Software and Affected Versions: GitLab DAST analyzer versions 1.47 through 3.0.50 Description: An issue has been discovered in the GitLab DAST analyzer, which sends custom request headers in redirects. Recommendations: For versions 1.47 through 3.0.50, update to version...

CVE-2022-4317

An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which sends custom request headers in redirects...