CVE-2022-3767
First published: Thu Mar 09 2023(Updated: )
Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless of the host.
Credit: cve@gitlab.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Gitlab Dynamic Application Security Testing Analyzer | >=1.11.0<3.0.32 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-3767?
CVE-2022-3767 is a vulnerability that affects the Gitlab Dynamic Application Security Testing Analyzer.
How does CVE-2022-3767 impact Gitlab?
CVE-2022-3767 allows custom request headers to be sent with every request, regardless of the host, in versions 1.11.0 to 3.0.32 of Gitlab Dynamic Application Security Testing Analyzer.
What is the severity of CVE-2022-3767?
CVE-2022-3767 has a severity rating of high (6.5).
Which versions of Gitlab are affected by CVE-2022-3767?
Versions 1.11.0 to 3.0.32 of Gitlab Dynamic Application Security Testing Analyzer are affected by CVE-2022-3767.
How can I fix CVE-2022-3767?
To fix CVE-2022-3767, update Gitlab Dynamic Application Security Testing Analyzer to a version newer than 3.0.32.
- collector/nvd-index
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/event
- agent/description
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/gitlab
- canonical/gitlab dynamic application security testing analyzer
- version/gitlab dynamic application security testing analyzer/1.11.0