CVE-2022-4317
First published: Thu Mar 09 2023(Updated: )
An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which sends custom request headers in redirects.
Credit: cve@gitlab.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Gitlab Dynamic Application Security Testing Analyzer | >=1.47.0<3.0.51 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2022-4317?
The severity of CVE-2022-4317 is medium with a CVSS score of 6.1.
What software versions are affected by CVE-2022-4317?
All versions of GitLab DAST analyzer starting from 1.47 before 3.0.51 are affected by CVE-2022-4317.
What is the issue with CVE-2022-4317?
CVE-2022-4317 is an issue in GitLab DAST analyzer that sends custom request headers in redirects.
Are there any references related to CVE-2022-4317?
Yes, references related to CVE-2022-4317 can be found at the following links: [Reference 1](https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4317.json), [Reference 2](https://gitlab.com/gitlab-org/gitlab/-/issues/384997), and [Reference 3](https://hackerone.com/reports/1767533).
What is the CWE ID for CVE-2022-4317?
The CWE ID for CVE-2022-4317 is 601.
- collector/nvd-index
- agent/author
- agent/severity
- agent/weakness
- agent/references
- agent/type
- agent/event
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/gitlab
- canonical/gitlab dynamic application security testing analyzer
- version/gitlab dynamic application security testing analyzer/1.47.0