CVE-2022-4317

Опубликовано: 09 мар. 2023

Источник: nvd

CVSS3: 5

CVSS3: 6.1

EPSS Низкий

Описание

An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which sends custom request headers in redirects.

Ссылки

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4317.json
Vendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/384997
Exploit
Vendor Advisory
https://hackerone.com/reports/1767533
Permissions Required
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4317.json
Vendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/384997
Exploit
Vendor Advisory
https://hackerone.com/reports/1767533
Permissions Required

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gitlab:dynamic_application_security_testing_analyzer:*:*:*:*:*:*:*:*

Версия от 1.47.0 (включая) до 3.0.51 (исключая)

EPSS

Процентиль: 36%

0.00152

Низкий

5 Medium

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-601

Связанные уязвимости

GHSA-4mvf-qm8g-c6mp

CVSS3: 6.1

github

почти 3 года назад

An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which sends custom request headers in redirects.

EPSS

Процентиль: 36%

0.00152

Низкий

5 Medium

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-601