Vulnerability CVE-2022-3767
Published: 2023-03-09   Modified: 2023-03-10

Description:
Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless of the host.

 References:
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3767.json
https://gitlab.com/gitlab-org/gitlab/-/issues/377473
Copyright 2026, cxsecurity.com

 

Back to Top