CVE-2023-1401

MEDIUM

GitLab DAST Scanner 3.0.29-4.0.5 - Cookie Leak on Redirect

Title source: llm

Description

An issue has been discovered in GitLab DAST scanner affecting all versions starting from 3.0.29 before 4.0.5, in which the DAST scanner leak cross site cookies on redirect during authorization.

References (2)

Core 2

Core References

Exploit, Issue Tracking, Vendor Advisory issue-tracking

https://gitlab.com/gitlab-org/gitlab/-/issues/396533

Permissions Required, Third Party Advisory technical-description exploit permissions-required

https://hackerone.com/reports/1889255

Scores

CVSS v3 5.0

EPSS 0.0012

EPSS Percentile 30.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-201

Status published

Products (1)

gitlab/gitlab 3.0.29 - 4.0.5

Published Jul 26, 2023

Tracked Since Feb 18, 2026