Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2023-0326

Disclosure Date: March 27, 2023 (last updated October 08, 2023)
An issue has been discovered in GitLab DAST API scanner affecting all versions starting from 1.6.50 before 2.11.0, where Authorization headers was leaked in vulnerability report evidence.
Attacker Value
Unknown

CVE-2022-3767

Disclosure Date: March 09, 2023 (last updated October 08, 2023)
Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless of the host.
Attacker Value
Unknown

CVE-2022-4317

Disclosure Date: March 09, 2023 (last updated October 08, 2023)
An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which sends custom request headers in redirects.
Attacker Value
Unknown

CVE-2022-4315

Disclosure Date: March 08, 2023 (last updated October 08, 2023)
An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 2.0 before 3.0.55, which sends custom request headers with every request on the authentication page.