DAST

>=1.47, <3.0.51

OTHER 1 CVE

>=1.11, <3.0.32

OTHER 1 CVE

CVE-2022-3767

Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless of the host.

HIGH Mar 09, 2023

CVE-2022-4317

An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which sends custom request headers in redirects.

MEDIUM Mar 09, 2023