MEDIUM

CVE-2022-4317

Gitlab Dynamic Application Security Testing Analyzer 2023-03-09 CVSS v3.1

CVSS

6.1

Description

An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which sends custom request headers in redirects.

Weakness (CWE)

CWE-601 Open Redirect

EPSS Score

0.54%

Probability of exploitation in next 30 days

44.4th percentile

References

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4317.json Vendor Advisory https://gitlab.com/gitlab-org/gitlab/-/issues/384997 Exploit, Vendor Advisory https://hackerone.com/reports/1767533 Permissions Required

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE