CVE-2022-4315

2023-03-0823:15:00

Google

osv.dev

gitlab

dast analyzer

custom request headers

authentication

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.8%

JSON

An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 2.0 before 3.0.55, which sends custom request headers with every request on the authentication page.

CPENameOperatorVersion
dasteq3.0.45
dasteq3.0.2
dasteq3.0.34
dasteq2.1.1
dasteq3.0.30
dasteq2.15.0
dasteq2.19.0
dasteq3.0.11
dasteq3.0.49
dasteq2.25.0