127 matches found
Building an AppSec Program with Qualys WAS – Introduction
Part 1 - Introduction and Configuring a Web Application or API: Basic Information Welcome to our introductory series of blogs where we will take you step-by-step through your application security journey with Qualys Web Application Scanning WAS to build and deploy secure web applications and APIs...
CVE-2023-1401
An issue has been discovered in GitLab DAST scanner affecting all versions starting from 3.0.29 before 4.0.5, in which the DAST scanner leak cross site cookies on redirect during authorization...
Cross site scripting
An issue has been discovered in GitLab DAST scanner affecting all versions starting from 3.0.29 before 4.0.5, in which the DAST scanner leak cross site cookies on redirect during authorization...
CVE-2023-1401 Insertion of Sensitive Information Into Sent Data in GitLab
An issue has been discovered in GitLab DAST scanner affecting all versions starting from 3.0.29 before 4.0.5, in which the DAST scanner leak cross site cookies on redirect during authorization...
CVE-2023-1401 Insertion of Sensitive Information Into Sent Data in GitLab
An issue has been discovered in GitLab DAST scanner affecting all versions starting from 3.0.29 before 4.0.5, in which the DAST scanner leak cross site cookies on redirect during authorization...
CVE-2023-1401
GitLab DAST scanner vulnerability CVE-2023-1401 affects GitLab DAST scanner versions 3.0.29 through 4.0.4. The issue is described as leaking cross-site cookies on redirect during authorization. The exact root cause is not detailed in the provided documents. Impact is described as cookie leakage; ...
GitLab 安全漏洞
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. A security vulnerability exists in GitLab DAST scanner versions prior to 3.0.29...
PT-2023-16958 · Gitlab · Gitlab Dast Api Scanner +1
Name of the Vulnerable Software and Affected Versions: GitLab DAST scanner versions 3.0.29 through 4.0.5 Description: An issue has been discovered in the GitLab DAST scanner where it leaks cross-site cookies on redirect during authorization. Recommendations: For versions 3.0.29 through 4.0.5,...
CakeFuzzer - Automatically And Continuously Discover Vulnerabilities In Web Applications Created Based On Specific Frameworks
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives. Currently it is implemented to support the Cake PHP framework. If you would like to learn more about t...
Information Disclosure
gitlab is vulnerable to Information Disclosure. Missing validation in DAST analyzer allows custom request headers to be sent with every request, regardless of the host...
PT-2023-17144 · Gitlab · Gitlab Dast Api Scanner
Name of the Vulnerable Software and Affected Versions: GitLab DAST API scanner versions 1.6.50 through 2.10.x Description: An issue has been discovered in the GitLab DAST API scanner where Authorization headers were leaked in vulnerability report evidence. Recommendations: For versions 1.6.50...
CVE-2023-0326
An issue has been discovered in GitLab DAST API scanner affecting all versions starting from 1.6.50 before 2.11.0, where Authorization headers was leaked in vulnerability report evidence...
Authorization
An issue has been discovered in GitLab DAST API scanner affecting all versions starting from 1.6.50 before 2.11.0, where Authorization headers was leaked in vulnerability report evidence...
CVE-2023-0326
Summary of CVE-2023-0326 (GitLab DAST API Scanner): Affects GitLab DAST API scanner versions 1.6.50 through 2.11.0. The root cause is leakage of Authorization headers in vulnerability report evidence, exposing credentials in reports. Documented impact is access to sensitive authorization data via...
CVE-2023-0326
An issue has been discovered in GitLab DAST API scanner affecting all versions starting from 1.6.50 before 2.11.0, where Authorization headers was leaked in vulnerability report evidence...
PT-2023-16180 · Gitlab · Gitlab Dast Api Scanner
Name of the Vulnerable Software and Affected Versions: GitLab DAST API scanner versions 1.6.50 through 2.11.0 Description: An issue has been discovered in the GitLab DAST API scanner where Authorization headers were leaked in vulnerability report evidence. Recommendations: For GitLab DAST API...
CVE-2023-0326
An issue has been discovered in GitLab DAST API scanner affecting all versions starting from 1.6.50 before 2.11.0, where Authorization headers was leaked in vulnerability report evidence...
CVE-2023-0326
An issue has been discovered in GitLab DAST API scanner affecting all versions starting from 1.6.50 before 2.11.0, where Authorization headers was leaked in vulnerability report evidence...
