Description
An issue has been discovered in GitLab DAST scanner affecting all versions starting from 3.0.29 before 4.0.5, in which the DAST scanner leak cross site cookies on redirect during authorization.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GitLab | GitLab | 3.0.29 – < 4.0.5 | 4.0.5 |
References
- GitLab Issue #396533 issue-tracking
- HackerOne Bug Bounty Report #1889255 technical-description exploit permissions-required