CVE-2023-1401

An issue has been discovered in GitLab DAST scanner affecting all versions starting from 3.0.29 before 4.0.5, in which the DAST scanner leak cross site cookies on redirect during authorization.

CVSS v3.1

4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CVSS v3.1

5.0 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

EPSS

0.52% chance of exploitation in the next 30 days, 42th percentile

Published

2023-07-26

Updated

2025-11-20

Proof-of-concept exploits (1)

• https://hackerone.com/reports/1889255

References

• CVE Record
• NVD entry

Related

• CVE-2023-1400
• CVE-2023-1405
• CVE-2023-1398
• CVE-2023-1406
• CVE-2023-1397
• CVE-2023-1407