120 matches found
CVE-2022-3767
Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless of the host...
CVE-2022-4317
An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which sends custom request headers in redirects...
CVE-2022-3767
GitLab CVE-2022-3767 affects the DAST analyzer in GitLab where missing validation allows custom request headers to be sent with every request, regardless of host, for all versions 1.11.0 up to 3.0.31. The impact includes potential exposure of sensitive data (confidentiality impact) as indicated b...
CVE-2022-4317
An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which sends custom request headers in redirects...
CVE-2022-4317
CVE-2022-4317 affects GitLab DAST analyzer versions 1.47 through 3.0.50, due to sending custom request headers in redirects. Impact details are not explicitly stated in the provided docs. Remediation: upgrade to version 3.0.51 or later. Exploitation status is not provided in the connected sources.
CVE-2022-3767
Removed by vendor...
CVE-2022-4315
An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 2.0 before 3.0.55, which sends custom request headers with every request on the authentication page...
Authentication flaw
An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 2.0 before 3.0.55, which sends custom request headers with every request on the authentication page...
CVE-2022-4315
GitLab DAST analyzer (versions 2.0 up to, but not including, 3.0.55) is affected by CVE-2022-4315. The issue arises from the analyzer sending custom request headers with every request on the authentication page. This has been characterized with a CVSS baseline of 6.5 (MEDIUM) by NVD, with Network...
CVE-2022-4315
An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 2.0 before 3.0.55, which sends custom request headers with every request on the authentication page...
GitLab 安全漏洞
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab DAST analyzer version 2.0 up to and...
CVE-2022-4315
An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 2.0 before 3.0.55, which sends custom request headers with every request on the authentication page...
CVE-2022-4315
An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 2.0 before 3.0.55, which sends custom request headers with every request on the authentication page...
CVE-2022-4206
A sensitive information leak issue has been discovered in all versions of DAST API scanner from 1.6.50 prior to 2.0.102, exposing the Authorization header in the vulnerability report...
Authorization
A sensitive information leak issue has been discovered in all versions of DAST API scanner from 1.6.50 prior to 2.0.102, exposing the Authorization header in the vulnerability report...
CVE-2022-4206
A sensitive information leak issue has been discovered in all versions of DAST API scanner from 1.6.50 prior to 2.0.102, exposing the Authorization header in the vulnerability report...
PT-2023-14064 · Unknown · Dast Api Scanner
Name of the Vulnerable Software and Affected Versions: DAST API scanner versions 1.6.50 through 2.0.101 Description: A sensitive information leak issue has been discovered, exposing the Authorization header in the vulnerability report. This issue affects all versions of the DAST API scanner prior...
CVE-2022-4206
A sensitive information leak issue has been discovered in all versions of DAST API scanner from 1.6.50 prior to 2.0.102, exposing the Authorization header in the vulnerability report...
CVE-2022-4206
The CVE-2022-4206 entry describes a sensitive information leak in the DAST API Scanner: all versions from 1.6.50 through 2.0.101 expose the Authorization header in vulnerability reports. Root cause is an information disclosure within the vulnerability report generation. Impact is confidentiality ...