Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2022-3767: 2022/CVE-2022-3767.json · master · GitLab.org / cves · GitLab

Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless of the host.

CVE
Open in Source
#js#git#auth

Skip to content

GitLab

Next

    • GitLab: the DevOps platform
    • Explore GitLab
    • Install GitLab
    • How GitLab compares
    • Get started
    • GitLab docs
    • GitLab Learn

  • Pricing

  • Talk to an expert

  • /

  • Help

    • Help

    • Support

    • Community forum

    • Submit feedback

    • Contribute to GitLab

    Projects Groups Snippets

  • Register

  • Sign in

  • GitLab.org

  • cves

  • Repository

  • cves

  • 2022

  • CVE-2022-3767.json

Find file BlameHistoryPermalink

  • Publishing 0 updated advisories and 2 new advisories · 7d18e94c

    🤖 GitLab Bot 🤖 authored Mar 04, 2023

    7d18e94c

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE