CVEvulnerability
CVE-2022-4315
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-03-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.0 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-863
Description
An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 2.0 before 3.0.55, which sends custom request headers with every request on the authentication page.
Affected configurations
• gitlab dynamic application security testing analyzer (>= 2.0.0 < 3.0.55)
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4315.json Vendor Advisory
- https://gitlab.com/gitlab-org/gitlab/-/issues/384995 Exploit, Vendor Advisory
- https://hackerone.com/reports/1767525 Permissions Required
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4315.json Vendor Advisory
- https://gitlab.com/gitlab-org/gitlab/-/issues/384995 Exploit, Vendor Advisory
- https://hackerone.com/reports/1767525 Permissions Required