CVE-2023-0326

An issue has been discovered in GitLab DAST API scanner affecting all versions starting from 1.6.50 before 2.11.0, where Authorization headers was leaked in vulnerability report evidence.

Score

CVSS 3.1 5.0 Medium

Status

Modified - cve@gitlab.com

Published

2023-03-27

Last modified

2025-02-19

Affected products

• Dynamic Application Security Testing Analyzer (Gitlab)
• Gitlab Dast Api Scanner (Gitlab)

References

• https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0326.json
• https://gitlab.com/gitlab-org/gitlab/-/issues/388132
• https://hackerone.com/reports/1826896