PT-2023-14180 · Gitlab · Gitlab Dast Analyzer
CVSS v3.1
5.0
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
GitLab DAST analyzer versions 1.47 through 3.0.50
Description
An issue has been discovered in the GitLab DAST analyzer, which sends custom request headers in redirects.
Recommendations
For versions 1.47 through 3.0.50, update to version 3.0.51 or later to resolve the issue.
Exploit
Fix
Open Redirect
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Gitlab Dast Analyzer