Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Dynamic_application_security_testing_analyzer
(Gitlab)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 4 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2023-03-08 | CVE-2022-4315 | An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 2.0 before 3.0.55, which sends custom request headers with every request on the authentication page. | Dynamic_application_security_testing_analyzer | 6.5 | ||
| 2023-03-09 | CVE-2022-3767 | Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless of the host. | Dynamic_application_security_testing_analyzer | 6.5 | ||
| 2023-03-09 | CVE-2022-4317 | An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which sends custom request headers in redirects. | Dynamic_application_security_testing_analyzer | 6.1 | ||
| 2023-03-27 | CVE-2023-0326 | An issue has been discovered in GitLab DAST API scanner affecting all versions starting from 1.6.50 before 2.11.0, where Authorization headers was leaked in vulnerability report evidence. | Dynamic_application_security_testing_analyzer | 4.3 |