Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2744▲ 67 respecto a la semana anterior
Críticas / altas1456▲ 350 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)92▼ 421 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (4.3) | 0.80% | — | Gitlab Dynamic Application Security Testing Analyzer | 27/3/2023 | 17/6/2026 | An issue has been discovered in GitLab DAST API scanner affecting all versions starting from 1.6.50 before 2.11.0, where Authorization headers was leaked in vulnerability report evidence. | |
| Modificada | Media (6.5) | 0.75% | — | Gitlab Dynamic Application Security Testing Analyzer | 9/3/2023 | 17/6/2026 | Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless of the host. | |
| Modificada | Media (6.1) | 0.54% | — | Gitlab Dynamic Application Security Testing Analyzer | 9/3/2023 | 17/6/2026 | An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which sends custom request headers in redirects. | |
| Modificada | Media (6.5) | 0.80% | — | Gitlab Dynamic Application Security Testing Analyzer | 8/3/2023 | 17/6/2026 | An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 2.0 before 3.0.55, which sends custom request headers with every request on the authentication page. |