Gitlab
Gitlab Dynamic Application Security Testing Analyzer: vulnerabilities and CVEs
Gitlab Dynamic Application Security Testing Analyzer has 4 published vulnerabilities, 0 of them in the last 12 months. 0 are rated critical and 0 are listed by CISA as actively exploited.
CVEs4
Last 12 months0
Critical0
Actively exploited0
All vulnerabilities in the catalogue →⭐ Follow this technology
Latest vulnerabilities
| CVE | Severity | EPSS | Active exploitation | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-0326 | Medium (4.3) | 0.80% | — | Mar 27, 2023 | An issue has been discovered in GitLab DAST API scanner affecting all versions starting from 1.6.50 before 2.11.0, where Authorization headers was leaked in vulnerability report evidence. |
| CVE-2022-3767 | Medium (6.5) | 0.75% | — | Mar 9, 2023 | Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless of the host. |
| CVE-2022-4317 | Medium (6.1) | 0.54% | — | Mar 9, 2023 | An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which sends custom request headers in redirects. |
| CVE-2022-4315 | Medium (6.5) | 0.80% | — | Mar 8, 2023 | An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 2.0 before 3.0.55, which sends custom request headers with every request on the authentication page. |