medium5.0
CVE-2022-4317
An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which sends custom request headers in redirects.
Impact
An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which sends custom request headers in redirects.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gitlab | Dynamic Application Security Testing Analyzer | from 1.47.0 before 3.0.51 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4317.json
- https://gitlab.com/gitlab-org/gitlab/-/issues/384997
- https://hackerone.com/reports/1767533
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4317.json
- https://gitlab.com/gitlab-org/gitlab/-/issues/384997
- https://hackerone.com/reports/1767533