GitLab Vulnerabilities and Affected Products
Vulnerabilities associated with DAST.
Products
Clear product- GitLab1,037 vulnerabilities
- GitLab CE/EE23 vulnerabilities
- GitLab Community and Enterprise Editions13 vulnerabilities
- GitLab EE10 vulnerabilities
- GitLab Runner6 vulnerabilities
- Community and Enterprise Editions2 vulnerabilities
- DAST2 vulnerabilities
- GitLab Community Edition2 vulnerabilities
- GitLab Enterprise Edition2 vulnerabilities
- gitlab-shell2 vulnerabilities
- gitlab-vscode-extension2 vulnerabilities
- DAST API scanner1 vulnerability
- Gitaly1 vulnerability
- GitLab AI Gateway1 vulnerability
- GitLab Community Edition and GitLab Enterprise Edition1 vulnerability
- GitLab DAST API scanner1 vulnerability
- GitLab Language Server1 vulnerability
- GitLab Pages1 vulnerability
- GitLab VSCode Fork1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2022-3767HIGH | Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless of the host. CWE-20Mar 9, 2023 | CVSS7.7v3.1 | EPSS0.746% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-4317MEDIUM | An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which sends custom request headers in redirects. CWE-601Mar 9, 2023 | CVSS5.0v3.1 | EPSS0.541% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |