CVE-2022-4317

CVE-2022-4317 affects GitLab DAST analyzer versions 1.47 through 3.0.50, due to sending custom request headers in redirects. Impact details are not explicitly stated in the provided docs. Remediation: upgrade to version 3.0.51 or later. Exploitation status is not provided in the connected sources.

CVE-2022-4315

GitLab DAST analyzer (versions 2.0 up to, but not including, 3.0.55) is affected by CVE-2022-4315. The issue arises from the analyzer sending custom request headers with every request on the authentication page. This has been characterized with a CVSS baseline of 6.5 (MEDIUM) by NVD, with Network...