Lucene search

K
osvGoogleOSV:CVE-2021-22236
HistoryAug 25, 2021 - 7:15 p.m.

CVE-2021-22236

2021-08-2519:15:10
Google
osv.dev
3

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

42.3%

Due to improper handling of OAuth client IDs, new subscriptions generated OAuth tokens on an incorrect OAuth client application. This vulnerability is present in GitLab CE/EE since version 14.1.

CPENameOperatorVersion
gitlabeq14.1.1-ee
gitlabeq14.1.0-ee

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

42.3%