p PatchFirst

CVE-2022-4206

CVE-2022-4206

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A sensitive information leak issue has been discovered in all versions of DAST API scanner from 1.6.50 prior to 2.0.102, exposing the Authorization header in the vulnerability report

CVSS 5.0 · Medium · EPSS 0.6%

Published
Updated

Stack: system

Affected products and versions

  • dast api scanner

    Versions
    • >=1.6.50, <2.0.102: Affected

    No fix published

  • gitlab Ubuntu:16.04:LTS

    Versions
    • 8.4.3+dfsg-9
    • 8.4.3+dfsg-12
    • 8.5.8+dfsg-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →