Skip to content
fr Sign in
7.7 High

CVE-2022-3767 Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to…

Description

Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless of the host.

Affected products and versions

Product Affected versions Fixed in
DAST 1.11 1.11 → < 3.0.32 3.0.32

References

Timeline

  1. Published
  2. Last modified

Other CVEs of DAST

The 2 CVEs of DAST →
CVE-2022-4317 An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which… 5.0 Medium
Track this CVE