CVE-2022-4206

A sensitive information leak issue has been discovered in all versions of DAST API scanner from 1.6.50 prior to 2.0.102, exposing the Authorization header in the vulnerability report

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@gitlab.com

Published

2023-02-01

Last modified

2025-03-27

Weaknesses

CWE-200

Affected products

• Dast Api Scanner (Gitlab)

References

• https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4206.json
• https://gitlab.com/gitlab-org/gitlab/-/issues/383083