GitLab 7.10 < 13.10.5 / 13.11 < 13.11.5 / 13.12 < 13.12.2 (CVE-2021-22213)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A cross-site leak vulnerability in the OAuth flow of all versions of GitLab CE/EE since 7.10 allowed an attacker to leak an OAuth access token by getting the victim to visit a malicious page with Safa...

CVE-2021-22213

creationtimestamp| type| source ---|---|--- 2023-11-12 18:10:58+00:00| seen| https://t.me/arpsyndicate/125...

[ASA-202106-21] gitlab: multiple issues

Arch Linux Security Advisory ASA-202106-21 ========================================== Severity: High Date : 2021-06-09 CVE-ID : CVE-2021-22181 CVE-2021-22213 CVE-2021-22214 CVE-2021-22216 CVE-2021-22217 CVE-2021-22218 CVE-2021-22219 CVE-2021-22220 CVE-2021-22221 Package : gitlab Type : multiple...

CVE-2021-22213

A cross-site leak vulnerability in the OAuth flow of all versions of GitLab CE/EE since 7.10 allowed an attacker to leak an OAuth access token by getting the victim to visit a malicious page with Safari...

CVE-2021-22213

A cross-site leak vulnerability in the OAuth flow of all versions of GitLab CE/EE since 7.10 allowed an attacker to leak an OAuth access token by getting the victim to visit a malicious page with Safari...

CVE-2021-22213

CVE-2021-22213 is a cross-site leak in the OAuth flow of all GitLab CE/EE versions since 7.10, enabling an attacker to leak an OAuth access token when a victim visits a malicious page in Safari. The issue is documented across multiple sources, noting the vulnerability affects GitLab CE/EE and tha...

CVE-2021-22213

Removed by vendor...