CVE-2023-1401
Insertion of Sensitive Information Into Sent Data in GitLab
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 5EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
26 Jul 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An issue has been discovered in GitLab DAST scanner affecting all versions starting from 3.0.29 before 4.0.5, in which the DAST scanner leak cross site cookies on redirect during authorization.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Affected products
GitLab · GitLabWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →