p PatchFirst

CVE-2022-3767

CVE-2022-3767

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless of the host.

CVSS 7.7 · High · EPSS 0.8%

Published
Updated

Stack: system

Affected products and versions

  • dast

    Versions
    • >=1.11, <3.0.32: Affected

    No fix published

  • gitlab Ubuntu:16.04:LTS

    Versions
    • 8.4.3+dfsg-9
    • 8.4.3+dfsg-12
    • 8.5.8+dfsg-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →