CVE-2022-4206

MEDIUM 6.5CVE-2022-4206 · Published 01/02/2023 · updated 17/06/2026

In short

CVE-2022-4206 is a MEDIUM (CVSS 6.5) vulnerability affecting dast api scanner (gitlab).
Chance of exploitation in the next 30 days (EPSS): 0.64%, higher than 50.6% of all vulnerabilities.
Fix: update to 2.0.102 or later.

Package	Affected versions	Patched versions
dast api scanner gitlab	`≥ 1.6.50, < 2.0.102`	`2.0.102`

Description

A sensitive information leak issue has been discovered in all versions of DAST API scanner from 1.6.50 prior to 2.0.102, exposing the Authorization header in the vulnerability report

References

gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4206.json · Vendor Advisory
gitlab.com/gitlab-org/gitlab/-/issues/383083 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free