PT-2023-16180 · Gitlab · Gitlab Dast Api Scanner

Joaxcaron · CVE-2023-0326 · Publicado 2023-03-27 · Atualizado 2023-04-03

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions GitLab DAST API scanner versions 1.6.50 through 2.11.0

Description An issue has been discovered in the GitLab DAST API scanner where Authorization headers were leaked in vulnerability report evidence.

Recommendations For GitLab DAST API scanner versions 1.6.50 through 2.11.0, update to version 2.11.0 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2023-0326

Produtos afetados

Gitlab Dast Api Scanner

Referências · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/0xxx/CVE-2023-0326.json · Exploit
• 🔥 https://gitlab.com/gitlab-org/gitlab/-/issues/388132 · Exploit
• https://osv.dev/vulnerability/CVE-2023-0326 · Aviso do Fabricante
• https://hackerone.com/reports/1826896 · Nota
• https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0326.json · Aviso do Fabricante
• https://t.me/cibsecurity/60846 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-0326 · Nota de Segurança