CVE-2022-3767
Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, r...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless of the host.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- report gitlab.com
- web gitlab.com