VULNERABILITY INTELLIGENCE

CVE-2022-4315

CVSS score5 MEDIUM

EPSS probability0.80%

CISA KEVNot currently listed

Published2023-03-08

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Description

An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 2.0 before 3.0.55, which sends custom request headers with every request on the authentication page.

Weakness classification

nvd@nist.gov: CWE-863
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-863

Primary references

cve@gitlab.com — Vendor Advisory
cve@gitlab.com — Exploit, Vendor Advisory
cve@gitlab.com — Permissions Required
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Permissions Required