CVE-2022-4317: Medium severity gitlab dynamic application security testing analyzer vulnerability
Published Mar 9, 2023
·Updated
An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which sends custom request headers in redirects.
Affected Software
1 affected component
GitLab Dynamic Application Security Testing Analyzer>=1.47.0<3.0.51
Event History
Mar 9, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-4317?
The severity of CVE-2022-4317 is medium with a CVSS score of 6.1.
2
What software versions are affected by CVE-2022-4317?
All versions of GitLab DAST analyzer starting from 1.47 before 3.0.51 are affected by CVE-2022-4317.
3
What is the issue with CVE-2022-4317?
CVE-2022-4317 is an issue in GitLab DAST analyzer that sends custom request headers in redirects.
4
Are there any references related to CVE-2022-4317?
Yes, references related to CVE-2022-4317 can be found at the following links: [Reference 1](https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4317.json), [Reference 2](https://gitlab.com/gitlab-org/gitlab/-/issues/384997), and [Reference 3](https://hackerone.com/reports/1767533).
5
What is the CWE ID for CVE-2022-4317?
The CWE ID for CVE-2022-4317 is 601.