CVE-2021-22213

Published: Jun 8, 2021Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

A cross-site leak vulnerability in the OAuth flow of all versions of GitLab CE/EE since 7.10 allowed an attacker to leak an OAuth access token by getting the victim to visit a malicious page with Safari

Affected (6)

Products: Gitlab: Gitlab

Gitlab

1 product

Gitlab

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	From 13.11.0 to 13.11.5
Gitlab Gitlab	From 13.12.0 to 13.12.2
Gitlab Gitlab	From 7.10.0 to 13.10.5
Gitlab Gitlab	From 13.11.0 to 13.11.5
Gitlab Gitlab	From 13.12.0 to 13.12.2
Gitlab Gitlab	From 7.10.0 to 13.10.5