Lucene search

K
osvGoogleOSV:CVE-2021-22213
HistoryJun 08, 2021 - 7:15 p.m.

CVE-2021-22213

2021-06-0819:15:07
Google
osv.dev
5

6.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.3%

A cross-site leak vulnerability in the OAuth flow of all versions of GitLab CE/EE since 7.10 allowed an attacker to leak an OAuth access token by getting the victim to visit a malicious page with Safari

CPENameOperatorVersion
gitlabeq13.12.0-ee
gitlabeq13.12.1-ee

6.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.3%